herdprotectscan_setup.exe

herdProtect Anti-Malware Scanner

Reason Company Software Inc.

Warning, this is an unsigned version of herdProtect and might be compromised. If you have this version on your PC please remove it and install a legitimate version from our website.
This is a setup and installation application. The file has been seen being downloaded from mega.co.nz and multiple other hosts.
Publisher:
Reason Company Software Inc.

Product:
herdProtect Anti-Malware Scanner

Version:
1.0.2.0"

MD5:
89a91a6d54ffa2aa5391c99eee43f6bf

SHA-1:
ebf89ed4709c6d6b23a57241fd8a334ae2c14be6

SHA-256:
2d21a4609c02de03149effe12451eb7f5e4e73fca90ad3832bf1f5319336834f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:14:11 AM UTC  (today)

File size:
2.1 MB (2,178,104 bytes)

Product version:
1.0.2.0"

Copyright:
Copyright Reason Company Software Inc.

Trademarks:
herdProtect is a Trademark of Reason Company Software Inc.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\herdprotectscan_setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:Gt4xrvyvafUd1XLjawWrgfngImVq9O4VdU16jfU47:xKas7XLxWkfgfcDzUY

Entry point:
55, 89, E5, 83, EC, 08, 83, C4, F4, 6A, 02, A1, C8, B2, 40, 00, FF, D0, E8, 79, FF, FF, FF, C9, C3, 00, 00, 00, 00, 00, 00, 00, 49, 6A, 65, 65, 66, 6F, 21, 45, 73, 62, 68, 70, 6F, 21, 77, 6A, 73, 76, 74, 2F, 21, 43, 70, 73, 6F, 21, 6A, 6F, 21, 62, 21, 75, 73, 70, 71, 6A, 64, 62, 6D, 21, 74, 78, 62, 6E, 71, 2F, 00, 5C, 00, 20, 00, 22, 00, 8D, 76, 00, 55, 89, E5, 8B, 4D, 08, 8B, 55, 0C, 31, C0, 39, D0, 73, 08, 00, 04, 08, 40, 39, D0, 72, F8, C9, C3, 8D, 76, 00, 55, 89, E5, 8B, 4D, 08, 8B, 55, 0C, 31, C0, 39...
 
[+]

Packer / compiler:
Video-Lan-Client

The file herdprotectscan_setup.exe has been seen being distributed by the following 5 URLs.

Scan herdprotectscan_setup.exe - Powered by Reason Core Security