home

conemusetup.140522.exe

ConEmu

ConEmu-Maximus5

This is a self-extracting archive and installer. The file has been seen being downloaded from mirror5.fosshub.com and multiple other hosts.
Publisher:
ConEmu-Maximus5  (signed and verified)

Product:
ConEmu

Description:
ConEmu Installer

Version:
140522

MD5:
a4823454180942310bbd29215667bc8f

SHA-1:
4ab642519c7eb4be45b9dd3085f354a8e98ddf4e

SHA-256:
4860251785c99c96f38f32b8f933090ad89b90b12e7c28806867617a06298605

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 5:37:07 AM UTC  (today)

File size:
2.8 MB (2,960,992 bytes)

Product version:
140522

Copyright:
(C) 2011 Maximus5

Original file name:
ConEmuSetup.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\conemusetup.140522.exe

Digital Signature
Signed by:
ConEmu-Maximus5

Authority:
ConEmu-Maximus5

Valid from:
3/24/2010 5:48:49 PM

Valid to:
12/31/2039 6:59:59 PM

Subject:
CN=ConEmu-Maximus5

Issuer:
CN=ConEmu-Maximus5

Serial number:
2A4C2EC34447938F4ADBB2F55D35FBAD

File PE Metadata
Compilation timestamp:
5/23/2014 3:35:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
49152:v+k7evl7UTPUNngBixz44JdXShE+fjzuoJ1NM5y:cvlDqBixPXSme5CE

Entry address:
0x1110

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 90, 92, 40, 00, E8, F8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, C7, 04, 24, 01, 00, 00, 00, FF, 15, 90, 92, 40, 00, E8, D8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 53, 83, EC, 14, 8B, 45, 08, 8B, 00, 8B, 00, 3D, 91, 00, 00, C0, 77, 3B, 3D, 8D, 00, 00, C0, 72, 4B, BB, 01, 00, 00, 00, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, 08, 00, 00, 00, E8, 03, 1E, 00, 00, 83, F8, 01, 0F, 84, 03, 01, 00, 00, 85, C0...
 
[+]

Entropy:
7.7453

Packer / compiler:
MingWin32 GCC, 0x3.x

Code size:
8.5 KB (8,704 bytes)

The file conemusetup.140522.exe has been seen being distributed by the following 2 URLs.

http://mirror5.fosshub.com/.../ConEmuSetup.140522.exe

http://www.fosshub.com/.../ConEmuSetup.140522.exe

Scan conemusetup.140522.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.