home

Snip.Setup.exe

Snip

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Snip

Version:
0.1.4814.0

MD5:
d99f0d3ce10d189e1b9dc5bbe7d08157

SHA-1:
24ae399d012f1631d065e590c2d1420ce7ba06bc

SHA-256:
8311b1be6f84a06ae68309a3cf721bcef2cb1b5bd2bb5567bcf86c8dcbcde7cc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/24/2024 4:27:08 AM UTC  (today)

File size:
2.1 MB (2,154,808 bytes)

Product version:
0.1.4814.0

Copyright:
Copyright (c) Microsoft Corporation. All rights reserved.

Original file name:
Snip.Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\snip.setup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 7:42:45 PM

Valid to:
9/4/2016 7:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
10/6/2014 8:03:33 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:Vgq8vNCYWOBSUDKzL8Tj443RHBj/saLxMwJ:Vgq2CMSUVTcGBB3H

Entry address:
0x29283

Entry point:
E8, FC, 39, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, 00, 20, 46, 00, 75, 02, F3, C3, E9, 85, 41, 00, 00, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 7F, 0F, B6, 44, 24, 08, 0F, BA, 25, 5C, 3F, 46, 00, 01, 73, 0D, 8B, 4C, 24, 0C, 57, 8B, 7C, 24, 08, F3, AA, EB, 5D, 8B, 54, 24, 0C, 81, FA, 80, 00, 00, 00, 7C, 0E, 0F, BA, 25, 60, 20, 46, 00, 01, 0F, 82, 3A, 42, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03...
 
[+]

Entropy:
7.4396

Code size:
270.5 KB (276,992 bytes)

The file Snip.Setup.exe has been seen being distributed by the following 41 URLs.

http://lb.cdn.m6web.fr/d/c/a/abc16569e668e40f3ac618216ae574f9/56ce0002/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/8a2d9ff914d6d0c0e2d0956c256ff392/5839f468/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/0f2bf4abd86a9564ab7e80676ebc72ae/5894eb3d/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/ed0580cc79df22341a4f0b5142bb4308/582efd1d/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/22ba6ce657f6c6bf27241fbb09f813c7/57f8ea79/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/0dda35166cb5606799229c6a856f6bb8/57aec3ce/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/550fa4751639abdded9705087f709e00/5834540b/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/30a011cb7d2889bb82c164256945da27/5818cbbb/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/04d309e5628a386a389949962fe3c7ad/57c2dba9/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/b4bf3ce79ca01161930bdf75f0658d82/57b9032f/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/14e2e17788f6973d9e478caa3034eead/58052158/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/102159ed5c8dbf70cfe9df596188ea91/580dc0b4/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/600911816478682e61e96d4a3838c964/583ae89e/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/ef00307222d2cb237292570edf91c1bc/583f3679/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/21b410a2e61472675febf07610d9574a/57ed979e/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/91b05c3329a194745bbb9c5158666e2e/579fc22f/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/8f4b3f60df7551b3d9cafdbb0faf9256/58469beb/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/40e2a7b6ad6b6680b60ba054af34def2/58446c0e/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/e714f20e21b3b4281d40c1bf521429a0/57dd6992/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/b29a40b728aa9304c7f1aa77068b1929/57bb7a80/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/fa796d363a22f383df3d15d0f0308b24/57a33a74/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/98ab97e0485af0efb34b29130c929a95/57bc2b34/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/0572f457c06f6c4e0bd6368f9d510624/578dddbc/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/039f7f33633f10caf0a3eb1bea7f8736/57aa0706/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/55e9fc2202a8d8acf001514d4e3500ad/5789fc62/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/2625c167a337f47e588ae3c118b5fe67/57936c17/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/ff02ebcbcecb06c98437b688ee619305/57652069/soft/.../snip_beta_fr_432421.exe

http://d210.cdn.m6web.fr/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/fa6176bb07cca1e2c34c93f90225d36f/57722808/soft/.../snip_beta_fr_432421.exe

http://lb.cdn.m6web.fr/d/c/a/6b6d4951fead5d224d0ed911276246df/57408808/soft/.../snip_beta_fr_432421.exe

Latest 30 of 41 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.