home

unikey_dsetup.exe

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from files.downloadsmart.net.
MD5:
26fb4fda0d7c3abc1edebacc55df3d8e

SHA-1:
0974a7dca2c914a639b27a3b12c8698b84fc4742

SHA-256:
7dbacf397bacb33a17253d29ab12d7a9668d763ac0b248f06baca7644805121b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 8:05:53 AM UTC  (today)

File size:
691.6 KB (708,232 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\unikey_dsetup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:yMJf74SMNHk7DX6KYsGhRXKzq7aA/pStvQ+sPtGtLxQtyky43vv9O0AVGJyc:yMJfsBwPzq7aOkv3sUatykx40w2

Entry address:
0x98CC

Entry point:
60, 81, FB, 37, 92, 00, 00, 72, 0A, C6, C7, 77, F6, C6, 47, 0F, AC, DD, 74, 8B, FF, 86, FC, 0F, BA, F8, E3, 0C, 56, D3, DA, 0F, BA, E0, 31, 0F, BE, CF, 0F, BB, F2, BE, 1F, E6, 5D, 9C, 0F, AF, F8, BB, E4, B8, 5D, 42, 0F, CF, 68, 13, F0, A9, 00, 31, F1, 0F, C1, D7, 84, EB, E8, 00, 00, 00, 00, 33, F6, 0D, 6C, B8, 6F, EF, 11, FA, 81, F9, D5, 9C, BC, 49, 0F, CB, 8D, 2D, 73, 9A, 97, 88, F7, D0, 8D, 05, D4, B3, B4, D5, D0, C1, 0F, B7, DF, 8A, F9, 68, D4, F3, FF, FF, 0F, C1, DD, 3A, DA, 5A, 0F, AF, C7, F6, C1, 34...
 
[+]

Code size:
36 KB (36,864 bytes)

The file unikey_dsetup.exe has been seen being distributed by the following URL.

http://files.downloadsmart.net/i/0107/x6799/.../unikey_dsetup.exe

Scan unikey_dsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.