sketchupwen.exe

SketchUp Make

Trimble Navigation

This is a setup and installation application. The file has been seen being downloaded from www.filehippo.com and multiple other hosts.
Publisher:
Trimble Navigation Limited  (signed by Trimble Navigation)

Product:
SketchUp Make

Description:
SketchUp Make Installer

Version:
13.0.4812

MD5:
7f965c797e6a1967f426541fba9ba961

SHA-1:
778f10d03e19fe921093b688faf90ce5730f457e

SHA-256:
ca5dbe404e9f3e86fa1b505d9bebeba461663c825e2d062ded45d90e73ca3272

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 11:37:40 AM UTC  (today)

File size:
72.2 MB (75,726,696 bytes)

Product version:
13.0.4812

Copyright:
Copyright © 2013 Trimble Navigation Limited

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\sketchupwen.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
12/11/2012 7:00:00 PM

Valid to:
2/10/2016 6:59:59 PM

Subject:
CN=Trimble Navigation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Trimble Navigation, L=Westminster, S=Colorado, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
253A9821E96D9EBA24D62AD3063947AD

File PE Metadata
Compilation timestamp:
5/12/2010 7:38:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1572864:Sn0EupJiLPfHj+giJj8JtN1/sfFZri9HBKHWUItE0IgsRNDfShxy5Vi0bjkR:Sn0EujiL3j+pBkNVsfFgXNNsPDqYM

Entry address:
0x14A9B

Entry point:
E8, 71, 39, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 58, 42, 42, 00, 89, 0D, 54, 42, 42, 00, 89, 15, 50, 42, 42, 00, 89, 1D, 4C, 42, 42, 00, 89, 35, 48, 42, 42, 00, 89, 3D, 44, 42, 42, 00, 66, 8C, 15, 70, 42, 42, 00, 66, 8C, 0D, 64, 42, 42, 00, 66, 8C, 1D, 40, 42, 42, 00, 66, 8C, 05, 3C, 42, 42, 00, 66, 8C, 25, 38, 42, 42, 00, 66, 8C, 2D, 34, 42, 42, 00, 9C, 8F, 05, 68, 42, 42, 00, 8B, 45, 00, A3, 5C, 42, 42, 00, 8B, 45, 04, A3, 60, 42, 42, 00, 8D, 45, 08, A3, 6C, 42, 42, 00, 8B...
 
[+]

Entropy:
7.9988  (probably packed)

Code size:
110 KB (112,640 bytes)

The file sketchupwen.exe has been seen being distributed by the following 47 URLs.

http://www.filehippo.com/pl/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/aced6e3474f6826e7add747f904f4bba/5344120e/soft/.../sketchup-make_14-0-4900_fr_19271.exe

http://sketchup.com.pl/pobierz/.../sketchup_make_2013

http://www.downloaddoo.com/Download.aspx?ProgramId=4471&Seq=1

http://download-fun.com/?dl=1&pi=ATi1NTgwNjCwAg==&osos=VdluDrW3cw==&chnl=ab-b_sa_chrome_win8_2015_3_25-0&dr=cHaWck1zIdV07dP1ckD0 T1z2dVl2Z7mc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLDSvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNjLFNTMwATCRvm5EIKiWXzMFAjg4OZiRAjA=&pd=2323Um5wcHAtc3VyDSFj d0=&campaignId=9jn0AzawNT7dAZMq

http://www.downloaddoo.com/ProgramId-4471-Seq-1-type-download-ReturnUrl.aspx

http://lb.cdn.m6web.fr/d/c/a/66f75bad0548ed4180e5d85dffec47ac/551ff77e/soft/.../sketchup-make_14-1-1282_fr_19271.exe

http://c236.y8top.net/2107tmp/cf/soft/2013/10/ba/.../gogle-sketchup_2013.exe

https://docs.google.com/a/.../uc?export=download&confirm=or8_&id=0B3VIbIhfo0a6YTlVSVk1X3ZOSGs

http://www.techspot.com/downloads/downloadnow/.../?evp=17d2ef3e8580987b69af76cb1de67a71&file=1

http://f51.y8top.net/2107tmp/cf/soft/2013/10/ba/.../gogle-sketchup_2013.exe

http://download.ba/load/.../

http://install-great.org/?dl=1&pi=Azn4Az71NTa0OM==&osos=VdluDrW3cw==&dr=cHaWck1zIdV07dP1ckD0 T1z2dVl2Z7mc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhL17vmNBDz1l QDjhTnmDZ0wvmNpDZ1fAZ7FNTMwATCRvm5EIKiWXza0NTC4OZiRAjA=&pd=2323Um5wcHAtc3VyDSFj d0=&campaignId=9jn0Azn0OZ7wAZMq

http://lb.cdn.m6web.fr/d/c/a/fc3f089a7aa837b5895c5f092b7ac940/55c0d31b/soft/.../sketchup-make_14-1-1282_fr_19271.exe

Latest 30 of 47 download URLs

Scan sketchupwen.exe - Powered by Reason Core Security