home

setup.exe

Project1

ClickX

Publisher:
ClickX

Product:
Project1

Version:
1.00

MD5:
08aa2b1a9a61dbfbfa7e844ccaa483bf

SHA-1:
e0a6066604dfc554ccf70edee3cc9b9f55452751

SHA-256:
c76893040e1465788a865808177058c295ab19e5d71534619fd464956559586f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 11:21:17 AM UTC  (today)

File size:
20 KB (20,480 bytes)

Product version:
1.00

Original file name:
Project1.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\setup.exe

File PE Metadata
Compilation timestamp:
9/8/2014 2:21:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
192:aPwSNlJvT97ViuQmmsBNaa2x3E0PSQMsUST7cJVy+xsI:irLhtVpNaalQMhDLyosI

Entry address:
0x10BC

Entry point:
68, A4, 13, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 38, 00, 00, 00, CA, 11, 2B, 40, A5, 5C, 74, 47, B2, 14, 24, ED, F8, 5F, BA, B2, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 43, 6C, 69, 63, 6B, 00, 00, 00, 43, 6C, 69, 63, 6B, 58, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 07, 4E, B8, AC, 73, D7, F5, 48, 48, 8F, F7, 71, 3F, 97, AB, 6F, 1A, C1, 77, 84, F8, 58, A0, 6A, 4B, AB, 68, 70, C1, B3, FE, 59, 02, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
3.3505

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
12 KB (12,288 bytes)

The file setup.exe has been seen being distributed by the following 5 URLs.

http://flv.downloadahceiduphoth.com/n/3.1.14/.../Setup.exe

http://flv.downloadahceiduphoth.com//n/.../Setup.exe

http://2.track342ut.com/.../531dea520e383?programid=123311&visitor_cid=20wHad2n7oiIqDBQ3uKBd61x79Ez000.&param3=176681&ce_cid=20wHad2n7oiIqDBQ3uKBd61x79Ez000.

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQa5heoXqXiWKYmmCkgpSJkGqXYZ57lbdqbp5joXs?dp=UnjudiziA8oSN6wDg_uRCw8RlxrpCItuFLD76KEr5eHQni_G6SwywmfDgS9a0Pkf_3qwiLfSZ3i0zNDwcoZ7pUes5WIlijtHPLS8ciDGWkQYgMuzjfv9IVPBYLuME7Fh5UxkJ51AN47R5Oyv-TO3ItSg6DcSMiuBZUWZ1OWR_mk8AWvPBvarp8WJ6NxaENOEG3Fw5QrcYj-YkAloNR0gTSIzTbKJrL9q-VyJNjjikGwk_BZoZtnfwruIr6j8psxHFUL_hty8jrkQKMQZiDJKP_HdEke5s4KKEQtLxlD21bC4kP6nnKidpQnZDJXc7vFAQ5lnhDuvOVdt60GAkq_YgMvcpFuNgbLOxqUSWF7UZj9ohXi-V3HbB0jCrMmuQFZpzCehIn7z1JrBefna-EHR1ah5AGnv0UgHSOMnHTyXO_UABZhKOlk

http://www.mydownloadhome.com/.../2?pub_id=88&sub_id=QnjalyqEH3ILqTX2hKOk5RivrPmsvq-RdQz58neMPdVwwSlRk7RCB3_M2oJQN9y97QZCrZrCAoKP8VJRIJEqVHjT46ADxTuEWal12jDa4cBHrgacT0xw9hIi-Qc-aCPpYnIrYSmW988ydgkoorPVBf9Kq0rsGIJ3DfxkJ2oVTxggSoe7uhndvFkJJkQNwuL_2TZrBv6ItGctpkn2-TqFyVyXmVWB0ZFW6MSJPqbiGh2KgNJ0PGGMGyG6D6DifTzcvUniXsuw7Dakk0MHW0THqMTfFNUMTHRoUyrPIzk18cLAEuamaj3MrQOysILhoudL8Y9x45pSbESOEJ-fBXBBNTg43IQssL0TFfC12CFN67LbQwGeTx2sswkd7hPKiMM-gOkQacZ76htFvmY1iXnGPlD-fULFrsUAxhrM2XN6nouCZelA

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.