home

Fotomatic-Setup.exe

Fotomatic

Cybia

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Cybia

Product:
Fotomatic

Description:
Fotomatic Setup

MD5:
78e8413cadf3c68f7359f03bb236ecd7

SHA-1:
083425a35c3dc05c4d01d780d50b0614d95fa1f9

SHA-256:
9d8104dd027fcc7923cdb5e14871ffd4dcc2d987b11c7ee39b437c5c1e83cf7c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:16:40 AM UTC  (today)

File size:
520.2 KB (532,668 bytes)

Product version:
1.4

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\fotomatic-setup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:5naHeUPgpPG0Xg5132YOqUJ4lkTpoKw7e9f44sF8VN0PsxQ46:5na+UPgF3w5BOzelkWK/9g4isxQ9

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9456

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file Fotomatic-Setup.exe has been seen being distributed by the following 5 URLs.

http://dw.uptodown.com/dwn/g2l_urdhK3FdW94iLcEoF15cBbH_g9VyG6bxDpJ8G8ACIIY6FUG0YeRdRNSGyeH86THdzLLM2okx2EYibg3-tfyZqbHwDi_c4w45EPH-aVL_prRmKOtrhoXLGXYNAq5C/KwRTOEK1cobsnFKiXzey4zBkqats3PvUN4iZX3xQn15MXlyPt5H4mvdH3D8IadVVP4yXr_ndYcQuYtUUgD6liYu1hH1GUg11EA4poZK0eH9BB0HBRiGoEpJPTmC1oPqO/TAL-goV1Q6TrnINmnuMWkNwRK3KjhZFpMP57oXmaxQiATi3pepItJSZf2H3XojlA0TsNoJEgcv0VdPznPjy0oEBkepjRZuzNk7tU_8aKvfufZ030bYzlbht5PRNQa9zB/.../

http://goo.gl/A4FPl

http://files.downloadnow.com/s/software/13/11/21/.../Fotomatic-Setup.exe

http://dw.uptodown.com/dwn/gbGHPX2BgwHkZtRErWXpzTvKFM3ZLO6VXuUUMHnyWY4JQBHhmF7iVZrO0jNv8U_NFxPu3l_PznLFDYLZ3n_K6XfBpACH2i8gAJxfNvUPmTWF24YXN79-3syzxiahMCUC/LIhfIWYVKhwDtJFUDlA9Ztz3OR8wa7oiPpgKOLeJSW2_fH5BWNq8kKE2pK7g9-EsYSWDDqZw-wstFb8SG71HDudJAkqe4Ax8B83e6RB9uBqsp6C4KzAov10GoEjtzyx0/.../

http://www.cybia.co.uk/.../Fotomatic-Setup.exe

Scan Fotomatic-Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.