home

templates.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
MD5:
ac47d4cc24151e1ff460eb6136f460c5

SHA-1:
e38d2d5fbc521a97cd64874eec4c56c9e1aef212

SHA-256:
602f085b1dbdad3b8c3aafbacdb48d7129fca26c8051cfc98cc0af2f745f5ad8

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 9:52:08 AM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/AdAgent.AR.gen
v6.4.7.1.166

File size:
6.9 MB (7,227,794 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\templates.exe

File PE Metadata
Compilation timestamp:
7/31/2010 9:32:56 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:CeQbk4PPj+DmJnTrMp3bWIhP4/M74F6zMctw877jyQKc0POrfv:CekTIpBg/i4aMc68/jybgX

Entry address:
0x29432

Entry point:
55, 8B, EC, 6A, FF, 68, 88, C8, 42, 00, 68, C0, 8C, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 38, C1, 42, 00, 33, D2, 8A, D4, 89, 15, 20, 39, 48, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 1C, 39, 48, 00, C1, E1, 08, 03, CA, 89, 0D, 18, 39, 48, 00, C1, E8, 10, A3, 14, 39, 48, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 33, 14, 00, 00, FF, 15, 0C, C1, 42, 00, A3, 20, 3E, 48, 00, E8...
 
[+]

Entropy:
7.9942

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
171 KB (175,104 bytes)

The file templates.exe has been seen being distributed by the following 15 URLs.

https://dw.uptodown.com/dwn/6zfXsn1pOgubV09CODrtkv9BDHNW6q5aGCGdYNt6_GppYUjaTHJgWeQH1EtATkhWdmrVpKkO86k3f05DbtrofUXDP3S1lVWXwCf-0Uy-_c56Sd4e7c9-74bw6lAcHa-E/T_DfPRy1I432aB4uwaKebGWfKD_QfpVZraVMG14kjlwF-1XVe1K6EW3nGQK9qeNUH_oiUW_RDIK1h1zKS0rLuL08LgjKqF8JFdAwu1LGSaElpqT_i0aRRnykq0ysLP3i/08CX6oxa11Qx9oEhLXPnKEvjXC2qOqHD_Za-2Cg3JKwoS6tq6yBL8Ap67GTyQEEt2496v7jHvC_9BZzjQjLjmlvznpuygROKnNs_ys0xi_HZ0bnD1UgV3EUpLMCDfArx/.../

https://dw.uptodown.com/dwn/0CM2M0ThGq6NNCUucHlxUC9pyzdJvX7veRWeLTLp8hqL67t4oHP5l1eYJd4C_jZvKwmbPt4DQjgsSCZQm1cE61p8UqCTPpgdxlDd2a7E4Zh8V9ilnQOWoM7vOe4XGtV5/Qwqfvov0R0z_1GtZphlaSlavLNe6x9e3m0WnPjmWcEclPDXKaMidoTTSw7z5BYyGhjzo0q09M_j6SiFQtc3lh7tTkUg-CEY73zmAdxlKtYimNM_TvOhDmcDh6eQ7pXU4/kArUN-3bqC74PXjHLWjz7ax3m9PgLWfkXqlIB0g5zoA1WqDV3b-gzU7J4vAqYA1p9Vv7l4TTSPqpNz5pW31vgjfXEwQsOUESafeWt86RB4L2MUHHL6IdaV7xu4B5YEiS/.../

https://dw.uptodown.com/dwn/v-4P6fm-SV2sCSFJHmImqTGCyvoZB-M4_O6CzY6bJOo5tTPaCJkKYjVgsSjyIXglNHauCf-1pO6_UKch6BOfsGAmXxNXwRl55RQlsPlRnu3CabN0MeRofwZeYqEOeLzJ/e8hkO-cT2vL71Tk0ZV8CpI08cnxASW4-6TKAz-FByS3QtQCaYacqZz4xdjUQL7QPRTYq16JKzVyuSCm5kSS1xreO52uKHaSZKyIzTdAGPhYsi3FKvPjACuRUgJg7YzlF/gWofAGEVHrYM_qDYoSvp3P6BvabSsn4SmQVMBgBEysX3Grgvx8WqbaPSQTvIE7x2qokx10bdtONElAyb2P-qSdH-4CGTwmrP7gJyiNLjFAEWm6x_hnA5Art_TlNoInry/.../

https://dw.uptodown.com/dwn/uj1Vxa8X5J6lKTmBUmk9z_FLxkmTWDFbZAAHq_R4U5Bb6C9Ade5fU4J14tupT3J-xMvX_PxCs91BKX4rYVHRDGgKzb1johik3xeSXUUhSGmvVku4pEWJbpQhx-jTsr-b/qqkj14Nje0YhynJvJxqNQToHGLe_TpxgFvIF-EJbFIpbJttlmBH82fSiwBVw4mwsOl2WTQs3nbDTBqFr8kjbmlkOHLgojHI84n84h4XGeLLRolRyF2DGuQIhEZnlPO4g/7F1TU62u2pd18zX5hUwRIx65x_fZYSnZAJ2--sWibVIDwt6yXraOPhamVAPWSlZBsFZLMYw7mxow2AQmh6amJP3iDgcBqxUnhenaasBDsIfHZGceMGQMOpLhW-hIzMSa/.../

http://dw.uptodown.com/dwn/Sbqu8X9d7CqeT7g_nREKavqlATxWMa8cFqoXY8PIDE_dsZ1clqfR_FG-CIIXGAwyI3OS7TvvCehzFnrkM-eb-sC7MKL2bdYwUph0WczMAw7AXyfnsmzXBqI-Yg5yKk4L/4_cUDe6wMhN2qqzQ_ZmspioBLTOTqh2Md4yNebOBXBHsfAZ2ixiAIJ6_EL_e25h9bZjrWBLR2WER2UtZJcOW71LvpQYW--ulHRK4-Tyjb21-MLzb9WZ4Vzwfp1oMqMfS/t_DVegI7jsfodFrmECdhzwU8PeQDNAtN225GF4Ky5DaA9m4wzKmT5Ejm7k41fEam6HPAI3ZSMDC5OEtu592g7M61kATmpUjEKWmUzOktIch0SPJwOgmTTTWNmFKyyU3n/.../

https://dw.uptodown.com/dwn/1SwEGy9mE02KlmfRD-g32IXDJREL6TKYnnet-g4tZBfd8jkBBTPqzUR6bfcVfLq_-GdNi6YLxhotPYW4rYHB8g4e8FVI6u7Q5WJ6GXs-Fe9QzrS7qK9fZbgC_XH5hhfg/7_YZvNgEVpM6LxvaTqogiCI977j_xWOlrLzjViU1yFKEaYGHVhGwub0WCJ3vQAFB5BeEktGTjallg0PWXwiSrbj7uPxEl1aS3k7_p9pqY0CmUf0jDekSdLIATboMFH64/wc65rIyGHiw6H4xDUlGjZGZ_itpsRkJNvdEP_lNzqaRnK5Bwio3EI0sImf_hqDoSqNiVswrej3s7IPCrce_GaE4XSlord0F8gqQmnqKJGD21sFTt8ue96yVTTwqpSAS9/.../

https://dw.uptodown.com/dwn/yYk03o1jZ4K8_BHMKwO5I08iHTU5pECdRTvmn6XS58WXQZ_t1V55RrBHNwd3yNpcuW26izEWyDZyVdx2CIjxCIyT_htq32jZYKZAo3Oq2-gj1D6kcYgEPJW3J75haok5/vdfBiOXn8isJuDCf1dP9zBXrwjqoQr4TgWWte1hhP2YVTNAxNH0kU9qsyvWHZaIuYD4o87UsVBOEK5Qo_8VAGnNQGNX9j6wqhtLjCYGfnkWVH85RP8GF0Y_zJnxmHm_s/oVh17fgNbxjF0GGSGX7eSGfYc2HhRDaXzdZZtYpoFuGaOjo1jpQsccCLmNwgrEsedXjhut_md0XVOu1CzvRNxJbz6jT_4xbgrPIDZTCN2SDgUiOSlsiXvzGsUZBfkJ_n/.../

http://dw.uptodown.com/dwn/K4KNJCM1sBAEOM5XpTo5ey5YWmbQHJ8SboFIOTPZ0XyOIyLbddpfcaCADIXXOZP00jJ5xKtKkqtDC8Yq6lD9rtHAUSleNSTaOgOrKuipe5OVVCPzURzIRuc6sYZxcSFB/k3zlrJvQWQReK9MGBe402m4T5OnpFmKm_DhLtcrjCOiyfn341_KvvsrHjirxSc2Ya0O4u3vZDsHWux3EDdmgLeGkVpuZuTjGX0Y31KfL_yJFwwXJKTsT40mT03CsvZP7/i6Vy8Vgtqwh8P66n8p8hrG4gRE1XnbVWTnxjvqz2HArOCi78h0SLP7eOXkJXCuaKmyLm2CdMfb-kndThz6mv6EO6qQzJjiMtwTpIuXazpwJVW4Qn8TicG8KyHdPvz0Ao/.../

https://dw.uptodown.com/dwn/CS07YSLA_En3F16TJkmuBy9KeFPftBo4QTokuzDgncp7ahwyg4Bivfud_BxS3uVBeLlPHGVtIa1B2McbPE7qABrgJSRgIMb286U_Ob6itINWKRR5-Ef8YnfW3NNjcM67/PbgL2K3ntTPq9iG7EHEmGdUP_CjxfBdB5PNPJ1uZ5N_sTRiF-anAFDw62pfUVb16zRKXUYVQpqBfQQ9sd8YkJ6ozqdIALGOCCDsG1T6Es84SAt5Bd1FsKhkwhXZg7t1D/amBy0UIOTQZBBjOqDn032HO70Pz080RR9RQZS6wfmU3t9OfzbhV6AndXCq8SzPZ8vLvxsnvh0-J2gqeggyVyy409VCZmo_zau0vJ-0kCk1IZKp-wqRDPVeOShlRH-BdB/.../

http://dw.uptodown.com/dwn/8MsjfNPFiCmk3EpmD10KLJpUwQ_0ACiGKmT4DTnmmXbMWPcINryQkVS09j7hi4cxZD5u9XGamXj346Sf6uK9h9GTamsZMwVn5icYEcf5JdMBwlGLGRQ-HIO8N6k2vgjW/mqoGVgwORGZSDdtnNGKglU6Yb8DcYqsfU_8YYrAIGs5vb3y4G8GrqrA9L9WZ-UmyrzKNmX0UtTaCRuXCvct6i8pGA5_2gupg_Zy6hiKID-Y9dkLv0AVpfFXFVb7CHJUL/ojCwSM6PhYELTIYezVj3WhWgdCm17jor25iDbGe76YSZ1txzRj5MR5W1pZv_2vNy3f0KwEUx_eO77AiLxe-BqKEsi48HiueYh8mK1nJ-v7I811CHc2Fedx0c_vSFQlZu/.../

http://dw.uptodown.com/dwn/XfDGd37SHSbcLZB4qbG9z1TSmlVp9C_GzXp9yEScJGwb9PRO7NTy9aP0yXX-UHpg6sjBoqapg-3j56sPRPm-l02xMB0nGFRfiOGHVmhiebZC3zNeD2EJGgNmGgGve5VL/RZ3elbS8fI3k6hqII7ff38EwXzyyb9prCAX-zdhkeBrz-M2qZZkMEPu8que1tFW08RzYbEYG0h70mqd5-GGyLlaSUqOyyX6ArHGCl8qWtKEJ1946M--eBnko9S9nq7l0/-aQISEaXbd4iNEClWlxgbVd4HhfAcrvGMxUDtr6CNx2SMZ9AnmJNX4yf0ISsH1kpPG_z0Piytk9LEhKgxAaqWloyUs-JDH-sexobLtokgd5TZKjCgASTl2OrPazBs5f9/.../

http://dw1.uptodown.com/dwn/PpLMw9yS10LZXaVghZ8ERqnP30MPx8P04r79bAqE4fP0Cz1SmJE55X0Y5RiM-7vc2nzTbMaYxX-jEl3UqsqG9u4gqhx-r8fkEUQb-1d6Mj2_a6Def_GuFcTHxXzqWBCV/YvITZD94kak6FQL3wvZmeMHCnEHrVpgLH0fXZIv8HONdHvW3kXp4_1cTkCRF8Gzhj6BkjKdCPzb_Hogvo9sVHvLYwHwuCjO3T8f7taZqMdG2yAKDJtry8Ol4To2s0JIa/c1jxz79g9GdZJS95_TQ550BdoyfoEb3EfH4_4n5il6FFuq3QvmFQtoj8bgYKazsTjyAJEH5uQAWBamFXDcNiyYXsy0aPPNsJD3a7TyAWLwGmeUbjFUJRxVyIQhVLjHdx/.../audiolabel-cd-dvd-labeler-5-00-build-9-en-win.exe

http://dw5.uptodown.com/dwn/eKmcGHK6bOu9Hk-XQgG_4TP88eYtMrVuKvoLdPg9og55Q_zWGYoe_mHcw5Obyj2akm4ZsY-ST4Eaxzuzt_jCQlLGFmu_PfxuBiS9Gu-5rXZrgAI1yztQG-AxLuW5w8-S/ZhOLTniZGJtkkJJA5DYHpcoce6UZLTPxEutykIkhmFNB90wu8JpKCdx2AKLNw40FQ4dEAjhL5qD4ado5w34aBZlRdKg8wosoii3ANeWI-E0MFcZbv8z9c_Op9_Rzc6eD/Qri9op6KJjs0c4HDDmHOetJ4y3tWAPNsNOfi9R_CWU0Ek70Ty8YHTk3rfWHFxwCf-YrnvTtl5NFnMWlx316Z_PQfRo71Iit-mDg1i_8IBcWw47f2KLqu7ASuVn4eD5pI/.../audiolabel-cd-dvd-labeler-5-00-build-9-en-win.exe

http://dw.uptodown.com/dwn/p_iYMX3Xx7PU0fIVvRTGKnhHWH9LkFG_HM4zAWjAQVvlYKy_F7rCo1crv-wSsmXBxSDBMEoe8lB7YYG9FzzgcmrWbA3W76-yioKxV0wrU-ycsKrOGgyBcht9vlR0_QT2/ZnMJt3k1BEKazrYUG-Iav00lYHS8tDIPleJOxuvdzBLuHtH0NYz2x83peSUpzzUiF6UgLA7BDv3xTj9hKrvZ1H0MV8bm6uqMaocCtWQuSW5_339Hm85PXIg9OWRxPTXR/awPyF_4Y-5uilI5-dvoWm0Pnk-0KT0qwGHjCqBhNV__lWQSr0gE_satQ8gg-pOXAYpbGwK1rruk3xYqeAzyeEUp4KwpBHnYiyUhPQ5b-urBf_YNnKybG9OyxKElH8K9e/.../

https://dw.uptodown.com/dwn/yd3zuPrep7B2-nBon9qrTLZOzSOXvsIzcEXiHaE-kgMRFN1DEu5ivzPOhhop-sa9i-VayStfKO_GF01wLsTV4dVsr33LwRnvqBxv5MLNFZIl8vlQQr_y_PqAL3g71SDW/-t5BT05lbcL2OrUEnlYCxyNwVBX_nb1U17IxeN-cjzzvxJTV4mjZ-CkgT9q6TqcI8xpeC_cC1IOp06CEOu_LsjT-rKswK_uxLpJ9SNReKiJ4wuJbuuMtlVKAOtywN59L/RtweEgMbyIUTD-13OXc3rQqSZjsqouPLAUxLfLAijtFVyJYn_iORl2j-MN2EhG24m3MfGmZD7PB_6SNiIi0U6aWekkN2K_XamQ3C54It1opRV0FgA_hRmddOAm-I2dD2/.../

Scan templates.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.