home

tes_construction_set_1.2.404.exe

InstallShield

Macrovision Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from cdn.bethsoft.com and multiple other hosts.
Publisher:
Macrovision Corporation

Product:
InstallShield (R)

Description:
Setup.exe

Version:
11.00.28844

MD5:
396089d6a610179d366d6b6b24ed52cd

SHA-1:
0e6999c61ba62fa607ee334fad733acae3e8cbf4

SHA-256:
34fd2cfbde39f21408be51e11ac399991550295484c518091ca0770f186fb4ec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 3:34:14 AM UTC  (today)

File size:
7 MB (7,326,147 bytes)

Product version:
11.00

Copyright:
Copyright (C) 2005 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\tes_construction_set_1.2.404.exe

File PE Metadata
Compilation timestamp:
4/4/2005 5:05:10 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:fp0c3is57E0DO+IO3ySMwDmCkr4EVY2UYJ2mHYUUvpIir:fp0c3N79DOhrwDmCZxmgeYzp1r

Entry address:
0xCE17

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 58, 21, 41, 00, 8B, F0, 85, F6, 75, 08, 6A, FF, FF, 15, 54, 21, 41, 00, 8A, 06, 57, 8B, 3D, 88, 22, 41, 00, 3C, 22, 75, 1B, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 04, 84, C0, 75, F1, 80, 3E, 22, 75, 15, 56, FF, D7, 8B, F0, EB, 0E, 3C, 20, 7E, 0A, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, 8A, 06, 84, C0, 74, 04, 3C, 20, 7E, E1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 50, 21, 41, 00, F6, 45, E8, 01, 5F, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF...
 
[+]

Entropy:
7.9859

Packer / compiler:
InstallShield Custom

Code size:
66.5 KB (68,096 bytes)

The file tes_construction_set_1.2.404.exe has been discovered within the following programs.

Oblivion  by Bethesda Softworks
The Elder Scrolls IV: Oblivion is an action role-playing video game developed by Bethesda Game Studios and published by Bethesda Softworks and the Take-Two Interactive subsidiary 2K Games.
www.bethsoft.com
9% remove it
Oblivion - Construction Set  by Bethesda Softworks
Publisher's description - “The Construction Set (CS for short) is a tool that can be used to view and edit the game's data files. The CS is an external program that is run separately from the game of Oblivion. The program is available for free from Bethesda. It can only be run on a PC.”
2% remove it
Oblivion - The Fighter's Stronghold  by Bethesda Softworks
5% remove it
Oblivion mod manager 1.1.12  by Timeslip
timeslip.chorrol.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file tes_construction_set_1.2.404.exe has been seen being distributed by the following 4 URLs.

https://cdn.bethsoft.com/elderscrolls/oblivion/.../tes_construction_set_1.2.404.exe

http://download.zenimax.com/elderscrolls/oblivion/.../tes_construction_set_1.2.404.exe

http://pnfiles.gamespy.com/hostedftp/planetelderscrolls/fms/files/other/.../tes_construction_set_1.2.404.exe

http://cdn.bethsoft.com/elderscrolls/oblivion/.../tes_construction_set_1.2.404.exe

Scan tes_construction_set_1.2.404.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.