home

dmr880_v4_setup.exe

Setup Factory 7.0 Runtime

The program is a setup application that uses the Setup Factory installer. The file has been seen being downloaded from wetransfer-us1.s3.amazonaws.com.
Product:
Setup Factory 7.0 Runtime

Description:
Setup Application

Version:
7.0.1.0

MD5:
e1dbed3b69b9a7ae736b64c4098dd15a

SHA-1:
6654f91b345a31c63a5a10abc00da979f580d6e6

SHA-256:
50ee9b4672eecd2a06b8375d1d84563dab9a7ab202390ae1312f5739c7905f2c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/8/2024 1:54:02 PM UTC  (today)

File size:
15.6 MB (16,326,656 bytes)

Product version:
7.0.1.0

Copyright:
Setup Engine Copyright © 2004 Indigo Rose Corporation

Trademarks:
Setup Factory is a trademark of Indigo Rose Corporation.

Original file name:
suf70_launch.exe

File type:
Executable application (Win32 EXE)

Installer:
Setup Factory

Language:
English (United States)

File PE Metadata
Compilation timestamp:
10/13/2004 11:10:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:j3z3wOCxgSlRqPhO+YHI4pkoRQ0lRqPhO+YTDGBXmG:jj3wRqS65O+AIW65O+ED

Entry address:
0x12000

Entry point:
55, 8B, EC, 83, EC, 70, 53, 83, 65, D0, 00, 83, 65, F8, 00, 83, 65, D8, 00, 33, C0, 66, 89, 45, CC, 83, 65, E0, 00, 83, 65, EC, 00, 83, 65, E4, 00, 83, 65, F4, 00, 83, 4D, DC, FF, 83, 65, D4, 00, 83, 65, C8, 00, 83, 65, E8, 00, 83, 65, F0, 00, 83, 65, FC, 00, C7, 45, AC, 72, 6F, 63, 41, 90, 90, 90, B8, 2F, 00, 00, 00, 40, 64, FF, 30, 5B, 89, 5D, E0, 8B, 45, E0, 8B, 40, 0C, 8B, 40, 1C, 8B, 00, 89, 45, EC, C7, 45, A8, 47, 65, 74, 50, 8B, 45, EC, 8B, 40, 08, 89, 45, F4, C7, 45, B4, 73, 73, 00, 00, 8B, 45, F4...
 
[+]

Entropy:
7.9956

Developed / compiled with:
Microsoft Visual C++

Code size:
108 KB (110,592 bytes)

The file dmr880_v4_setup.exe has been seen being distributed by the following URL.

https://wetransfer-us1.s3.amazonaws.com/14f57d2eccc5c6440ba51c252e79a65b20150824093042?response-content-disposition=attachment; foo=bar; filename="DMR880_V4_setup.exe"; filename*=UTF-8''DMR880_V4_setup.exe&AWSAccessKeyId=AKIAIQ6E6WYDY7EA2ZIQ&Expires=1440422753&Signature=GuPoSRkMgm0P 41XFWMvOKInwnc=

Scan dmr880_v4_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.