home

setup_windows.exe

InstallShield

Macrovision Corporation

The program is a setup application that uses the InstallShield Setup installer.
Publisher:
Macrovision Corporation

Product:
InstallShield

Description:
Setup.exe

Version:
12.0.58855

MD5:
bd6259daf05e91e79bf933ba674623dc

SHA-1:
d44691caddb9d3b88c73be371c6578cc394a30d0

SHA-256:
ca69392cf5817c504d0d4a7edbdf847a9acecf458f9ddb18127ff40ba90d20d7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:31:44 AM UTC  (today)

File size:
29 MB (30,449,360 bytes)

Product version:
12.0

Copyright:
Copyright (C) 2006 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup_windows.exe

File PE Metadata
Compilation timestamp:
8/28/2007 10:22:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:yFzQas1HPsgV5zlcPYvdZ5Fzq1+rOhU5GRe1BKR9m:A0Hr5zi6Z5Fzq1xhRRs

Entry address:
0x3B309

Entry point:
60, 75, 0A, C6, C5, 16, 8D, 3D, B4, DB, 30, E4, F2, 81, FA, DD, 23, 00, 00, 72, 07, 88, FE, 15, 8E, CC, 2C, FF, 88, E9, 0B, DB, 11, C9, 57, 53, F7, C0, AE, A5, 68, D9, 69, CF, EF, A5, B1, 99, 13, CA, 0F, BF, EB, E8, 33, 00, 00, 00, 76, 08, 81, F6, 32, F3, CB, E8, 23, ED, 2D, E2, EE, 14, 2A, 86, EE, 8A, F6, 81, FF, C6, 01, 00, 00, 73, 08, 85, E9, 81, D5, 02, 06, 84, 97, 6A, 00, 5B, C7, C5, A6, BD, ED, B6, 40, F3, 03, DF, F2, FF, C5, 5D, C6, C7, 4B, 2D, 04, 9B, 09, 70, 68, 1B, AF, 88, 00, 68, 6E, 9F, 6E, 00...
 
[+]

Code size:
280 KB (286,720 bytes)

The file setup_windows.exe has been seen being distributed by the following URL.

ftp://ftp.free.fr/pub/support/.../setup_windows.exe

Scan setup_windows.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.