home

AtSetup.EXE

AtSetup ｱﾌﾟﾘｹｰｼｮﾝ

AGENDA Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘AtSetup’.
Publisher:
AGENDA  (signed by AGENDA Co., Ltd.)

Product:
AtSetup ｱﾌﾟﾘｹｰｼｮﾝ

Description:
宛名職人2012 セットアップランチャー

Version:
12, 0, 0, 0

MD5:
8534dc7b5213378d2145596309d1356e

SHA-1:
befcfa4e1c2ef0aa0de14a55ba0f9d53bf940b60

SHA-256:
413917f89569121ac2f769d44d35ac67402e07d725ba8426a056132b61c2f6a0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 6:28:27 AM UTC  (today)

File size:
2.6 MB (2,724,168 bytes)

Product version:
12, 0, 0, 0

Copyright:
Copyright (C) 2002-2010 AGENDA Co.,LTD.

Original file name:
AtSetup.EXE

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
AGENDA Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
6/13/2011 9:00:00 AM

Valid to:
6/13/2012 8:59:59 AM

Subject:
CN="AGENDA Co., Ltd.", OU=Product Marketing Div, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="AGENDA Co., Ltd.", L=Sapporo, S=Hokkaido, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
484707BB461EEE5393D239089CDFA3EC

File PE Metadata
Compilation timestamp:
8/4/2011 5:19:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:ZGZMG07uj+rmdI3PGgRbg0LKBiSss8LAM/cpq9OcKQEi5opgeZhNARWY+cO:ZW0ySrJ+aSsrcpkOWEi5dehSAY+h

Entry address:
0x3CA2

Entry point:
55, 8B, EC, 6A, FF, 68, 38, 49, 41, 00, 68, 3C, 65, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 8C, 31, 41, 00, 33, D2, 8A, D4, 89, 15, 44, B7, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 40, B7, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 3C, B7, 41, 00, C1, E8, 10, A3, 38, B7, 41, 00, 6A, 01, E8, F5, 27, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 9A, 1E, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
4.7343

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
72 KB (73,728 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AtSetup

Command:
C:\atsetup.exe


Scan AtSetup.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.