home

setup_maxthon.exe

Maxthon Cloud Browser

Maxthon (Asia) Limited.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Maxthon Cloud Browser. The file has been seen being downloaded from ecd.maxthon.com and multiple other hosts.
Publisher:
Maxthon International ltd.  (signed by Maxthon (Asia) Limited.)

Product:
Maxthon Cloud Browser

Description:
Maxthon 4

Version:
4.2.1.1000

MD5:
4d08adac7f96a79b45cbac9832800381

SHA-1:
b3d3b7f51736a0922c751ff02200118c3ee2168f

SHA-256:
bed4e9dd0f54ce3710eb4ddf35a17ec3b8909d012be575eec04403ab05e4c090

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 10:46:24 AM UTC  (today)

File size:
1.8 MB (1,853,864 bytes)

Copyright:
(C) Maxthon. All rights reserved

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\setup_maxthon.exe

Digital Signature
Signed by:
Maxthon (Asia) Limited.

Authority:
VeriSign, Inc.

Valid from:
7/11/2012 2:00:00 AM

Valid to:
7/15/2015 1:59:59 AM

Subject:
CN=Maxthon (Asia) Limited., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Maxthon (Asia) Limited., L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
47DDF8EECEB4253C9C27C68B205AE71A

File PE Metadata
Compilation timestamp:
6/6/2009 11:41:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:JJkGNTLBGrEwT8yHAWQGf4R9LZQUW+nRPM:JJJ1eEw4yMR3bDK

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file setup_maxthon.exe has been discovered within the following program.

Maxthon Cloud Browser  by Maxthon International Limited
Publisher's description - “Maxthon Cloud Browser for Windows uses a unique, innovative dual-core design that uses both Webkit and Trident. Fast and efficient, our dual-core design displays all web pages quickly and reliably.”
www.maxthon.com
3% remove it
 
Powered by Should I Remove It?

The file setup_maxthon.exe has been seen being distributed by the following 6 URLs.

http://ecd.maxthon.com/dl?l=Czech

http://ecd.maxthon.com/.../dl

http://ecd.maxthon.com/dl?l=German

http://dl.maxthon.com/.../setup_maxthon.exe

http://ecd.maxthon.com/dl?l=English

http://go.microsoft.com/.../?LinkID=166943

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.