home

setup1.0.0.37.exe

ZenGuard GmbH

This is a setup and installation application. The file has been seen being downloaded from www.megadlcenter.com and multiple other hosts.
Publisher:
ZenGuard GmbH  (signed and verified)

Description:
Setup

Version:
12.0.21005.1 built by: REL

MD5:
52d787db9db2879d60ef47e11ceea02a

SHA-1:
69b30c77b6f4063db804636c1ee8a84bd5011a77

SHA-256:
3ef9a47db61d987472f13a1fa1b6043fd5bdff5d70360e24686618fc9a397f39

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/28/2024 10:48:39 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.XPACK.Gen
7.11.30.172

File size:
419.1 KB (429,200 bytes)

Product version:
12.0.21005.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup1.0.0.37.exe

Digital Signature
Signed by:
ZenGuard GmbH

Authority:
StartCom Ltd.

Valid from:
9/22/2014 4:48:53 PM

Valid to:
9/22/2016 1:48:07 AM

Subject:
E=info@zenmate.com, CN=ZenGuard GmbH, O=ZenGuard GmbH, L=Berlin, S=Berlin, C=DE, Description=xhD1hJBS65SbUEo0

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
1033

File PE Metadata
Compilation timestamp:
10/5/2013 6:40:50 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
6144:QDRMxppSSVridF55EGOaJhaQXgFIaUHQWWiNLsqEIvooEE0WgpgWuKjM8Ifu4dW:QDGxppI1wQwFXQWiNm5M8Ifu4I

Entry address:
0x2FAFD

Entry point:
E8, AD, 65, 00, 00, E9, 7F, FE, FF, FF, E9, 06, 32, 00, 00, 55, 8B, EC, 56, FF, 75, 08, 8B, F1, E8, B5, 32, 00, 00, C7, 06, 44, 65, 40, 00, 8B, C6, 5E, 5D, C2, 04, 00, C7, 01, 44, 65, 40, 00, E9, C0, 32, 00, 00, 55, 8B, EC, 83, EC, 10, EB, 0D, FF, 75, 08, E8, 64, 6D, 00, 00, 59, 85, C0, 74, 11, FF, 75, 08, E8, C5, 6C, 00, 00, 59, 85, C0, 74, E6, 8B, E5, 5D, C3, 6A, 01, 8D, 45, FC, C7, 45, FC, 4C, 65, 40, 00, 50, 8D, 4D, F0, E8, 47, 32, 00, 00, 68, 4C, 10, 45, 00, 8D, 45, F0, C7, 45, F0, 44, 65, 40, 00, 50...
 
[+]

Code size:
323.5 KB (331,264 bytes)

The file setup1.0.0.37.exe has been seen being distributed by the following 10 URLs.

http://www.megadlcenter.com/SuGc2P3Z09ZTyFz2mKYSYVKpC1Wbt9kGeggL6ye7ftk4HYA9EKOpu5cVuXqvE1xb4TcbnpvXpANXgEUAEy6h9BCRI61hulFOPYdWh7jveAoo2g2 BRiBWYubgmxUecOHvg12TxmD4FrQcp4yr8BnpebtHbcIb197XWvIiTQmLZeJ8k_FD4IZ8wCyAOhThu_r2J7bE4Q9-GzUAAARqc7H5MRsuKuocjMFEDhxaoJnd5bAxdq7gsJdrXBcKG 4tq0 GL2roMjrsLeMB

http://download.findmysoft.com/2016/01/.../ZenMate_1.1.0.2-Beta.exe

http://files.downloadnow-3.com/s/software/14/49/93/.../setup.exe

http://software-files-a.cnet.com/s/software/14/49/93/.../setup.exe

http://dl.cdn.chip.de/downloads/.../ZenMate1225.exe

http://www.fraps.com/.../setup.exe

http://pixelmon.mc-ozone.com/setup.exe

http://zenmate-firefox.en.softonic.com/download-tracker?th=1/.../AtrgXjZbt0eRAkBh01o8tGYYgp33Qd525HniClQayPSi0AEuqxthh6Twwa0KeTftg8SWJVA lR6exE PxT0dEDiwRBsabN15SPP2jF8mg n4CLIlV9L7ehDgDiHGL ERpIGqE9mH69KzQHJmDD9VlWIg8Rg==

http://sharewareonsale.com/?download_file=3848085&order=wc_order_567fc70f9ceac&email=cheapiptv@hush.com&key=c5155a89de30c5818bd301324c1166e0

https://zenmate-windows-update.s3-eu-west-1.amazonaws.com/setup.exe

Scan setup1.0.0.37.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.