home

bearsharesetup-r1552-w-bc.exe

Win

Microsoft

This is a setup program which is used to install the application. The file has been seen being downloaded from download.bearshare.com.
Publisher:
Microsoft

Product:
Win

Version:
1.00

MD5:
c4b22fe04a54ad8703667cc26c335701

SHA-1:
507bd81e1a7e10bc8c2f2c8b13eed02a20defb56

SHA-256:
dd948f068456501eacde659906be302a45a822257288347b23a3c4d181612602

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 4:03:54 AM UTC  (today)

File size:
2 MB (2,076,124 bytes)

Product version:
1.00

Original file name:
Win.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\bearsharesetup-r1552-w-bc.exe

File PE Metadata
Compilation timestamp:
6/14/2011 2:01:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:JYC10JJqQyMRuYZSAliaY7zMUPcECZMdT1IULH9:2sbsJplVkgOwad5p9

Entry address:
0x3670

Entry point:
EB, 02, 88, D1, 23, FF, 0F, BE, F1, F6, C6, B7, FF, C6, 68, 7E, D6, 60, 00, 80, D3, 63, 0F, B6, F2, 81, F0, 6B, 6A, 9A, 7E, 4A, 69, C8, A6, 22, 76, 7D, 03, F2, 85, FB, 72, 0A, 1B, F0, 8D, 2D, 93, 46, 4C, 4C, B1, 65, 68, EE, 0E, 00, 00, F3, 5F, 0F, AF, CA, 81, EF, B7, 00, 00, 00, F2, 0F, B6, D4, 80, CA, 6B, 78, 02, 39, F1, 85, EB, F7, C6, 22, A8, F2, B6, 46, 81, EF, 23, F2, FD, FF, 01, D0, F7, C7, 3E, 03, EE, 7E, F3, 81, EF, DE, 0D, 02, 00, FF, C1, 69, DB, 32, 77, 95, 54, F7, C1, 37, D6, A5, 57, B1, D4, 34...
 
[+]

Entropy:
7.8170

Packer / compiler:
FSG v1.10 (Microsoft Visual C++ 6.0 / 7.0)

Code size:
172 KB (176,128 bytes)

The file bearsharesetup-r1552-w-bc.exe has been seen being distributed by the following URL.

http://download.bearshare.com/.../BearShareV10es.exe

Scan bearsharesetup-r1552-w-bc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.