home

install.exe

InstallAnywhere

Flexera Software

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Flexera Software

Product:
InstallAnywhere

Description:
InstallAnywhere Self-Extractor

Version:
11, 5, 0, 0

MD5:
00ddc5b3974926477ed64e9d390b14de

SHA-1:
03228cd4e33ad3a7d2f3ec1025df0bd613ea0a21

SHA-256:
ef26f6430007d19246c2a24b812def33050eeb516c4da9aabde0efd25486f720

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:17:53 PM UTC  (today)

File size:
40.9 MB (42,854,499 bytes)

Product version:
11, 5, 0, 0

Copyright:
(C) 1997-2010 Flexera Software, Inc. and/or InstallShield Co. Inc.

Original file name:
iase.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\install.exe

File PE Metadata
Compilation timestamp:
8/13/2010 4:17:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
786432:pK2vGaEbdD4hp/OBfkBHXSJSYxDvpTjU/SfzpL3GVYbpasbQ:wCID4SJkdoSYxDtU/SfNL3KY2

Entry address:
0x43270

Entry point:
60, BE, 00, C0, 42, 00, 8D, BE, 00, 50, FD, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Entropy:
7.9985

Packer / compiler:
UPX 2.90LZMA]

Code size:
96 KB (98,304 bytes)

The file install.exe has been seen being distributed by the following 9 URLs.

http://gsf-cf.softonic.com/032/28c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69671504&instance=softonic_es&type=PROGRAM&Expires=1422059120&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UCSao18kUwmO4aktTYNM83xm1BwjPxFzXqeB5p3bS~lr65vfpGwCmh9WQu9kRh~Iv2y2wzHMv8Lw0Rv-YDw6dlx0hkDV-PzYO2r0AGRArfmi4QXMmpTpVomoHKDSUySiVLxe-JNBM71CTEVMY5snjyHWJxtkng4opFDVpMvJUjk_&filename=install.exe

http://ec.ccm2.net/es.ccm.net/download/.../install2.6.2.0.exe

http://gsf-cf.softonic.com/032/28c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69671504&instance=softonic_es&type=PROGRAM&Expires=1462143616&Signature=XZqEheJmvHMJTy0hfPCehetiySWdNnugVuSEv8hXhBE5bOEwjCLujIN9ZYl-7M6ycsT8TaAb0WCN6Fj2sDnElBnC8tLrOj9GVNfEnwwzmwpU0RiNfwLyA5ZttmEiPvYu2Nk6oB6qxsqaxQ2XxeSaAY4QjmRBEbEbJ35LdMfb~x0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=install.exe

http://dw.uptodown.com/dwn/LxbBl2sXqKqhTXqkdPMuS8lhzLTqN7DB8Jhnx7uJ-AO2y_Bv-C5zRXDzCW5z9ALCNc8zUUs9oI0uj3bxb8AD_CZ5ezD9_BRuunsBu-7IEc4hPwJoMmkP48jeQc9KGpp5/0mcaY9uUW641gbcjUWxRscRYMwvS-pu2rV9EcO7UZgV0QWG-MnCnvLSbGkxQ4aGVvsbKUyX0n5LLCqLG46Tc68ft7urAvJcI0NlGCofcESATMmNnYG6wh_n01G91Y8UM/.../

http://gsf-cf.softonic.com/032/28c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69671504&instance=softonic_es&type=PROGRAM&Expires=1439993978&Signature=BpCOv6oumX1QwZNhmniyrB3kUngiFwnzSNUwroCFN02wIA6sBIw-nDDquBNf16UqGJet03E1r4pwkCocqQHboW~0Y0wKrWkh48pheOPfChOoDDar3MjG9g1OcAc2qjec6W9wnC4ZY2wMMnz8~cwFrdhbWv0ReeIOirQ9-u5~EMM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=install.exe

http://gsf-cf.softonic.com/032/28c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69671504&instance=softonic_es&type=PROGRAM&Expires=1454303587&Signature=hRYT~NPjpsG~GmXDYQDbiKPNiOxBstqnwHn7nGZCyfb9i-PWVo4BT45BATHSoHoqx9Dd-vKyftHc8-s5qy-g3UQWL6JBUp7mkV8LOZlKQX13gjUNjeQGyciG0o8QueCjDQXz3~oqBeMUFXuKIVaLvE2uIbvSn7LklAnALqdElqQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=install.exe

http://gsf-cf.softonic.com/032/28c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69671504&instance=softonic_es&type=PROGRAM&Expires=1437296612&Signature=F0OXsSbKxLJD4JrGLA99smgxfKPlXoU5cG-5iUll22u3rWk-w2gvVRUmMZNYLIONZxN6AniVuXQe--zbFUAIktAmknlZJ~kFe2DYZUy826TCcp1PpF0yGqKw2m3yqnnta4g-cjrm2tPBMEi2cQJDCmD0A~UhwdAb5O12iPqTOHM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=install.exe

http://gsf-cf.softonic.com/032/28c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69671504&instance=softonic_es&type=PROGRAM&Expires=1447229044&Signature=BH-rUeL4rxyKRvEQJbCUvt5dj-i7xBOZxKYoh-JnXHIbNvdHW2X7Z1ckUUQ3yM1lzpPyvmg0L5O6k-KnOhRv6e7piUYKPijdCy~CAIzFTLzdBUbtepQjkg9DkmlL-eUuXI-u-HsJ2Fl3P3MygsvgtthM44fDjzqybvToQd4d-ms_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=install.exe

https://skifta-prod.s3.amazonaws.com/installer/Windows/.../install.exe

Scan install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.