home

makeupinstrument_setup.exe

MakeUp Instrument

Fatykhov Timur

This is a setup and installation application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Fatykhov Timur

Product:
MakeUp Instrument

Description:
MakeUp Instrument Setup

Version:
7.4 Build 740

MD5:
b0c3b3900acca1364b51cd0cb36588c3

SHA-1:
c36c19ddcf88a133685b296fd21c5de0123492b0

SHA-256:
a9d14a051e6ac94a0b8cc678119c8b40b6c2b5d04dae1a1b7990adf9d1ab5b03

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/21/2024 1:19:02 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Adware.Optimizerpro-2
0.98/21511

File size:
3.2 MB (3,367,666 bytes)

Product version:
7.4 Build 740

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\makeupinstrument_setup.exe

File PE Metadata
Compilation timestamp:
7/9/2014 8:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:xrL2o4qwFD+TWO/A/iyBpY9d+Rzt6S7xAeLG:R2oaEWOYtBa9dcBVxAeK

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file makeupinstrument_setup.exe has been seen being distributed by the following 8 URLs.

http://dw.uptodown.com/dwn/SntxilrMoqs70LB6k0ToIGAbGiR2WBnJFypVo2opOOKc5ZeAW7e4iFmEfdHYG6qEAbfSaXCvO4uQEfSZk_cBZZhMHfDF1r6ZrRH9yW_7gw1_IFTSJJc0G9poU94TIIbi/-OKBaOMq70PeIhE0B2ZLWQFInQuPGJoh6RV1fpazNrEAQNBRCe9_HyWfSRyJDELr3RaSI1Y0kVk0-j2FEHYQkxE7PmzTuppHJKv6NuDxm0H2d8EMuAXccf7-L1fpdF7o/bOW01pCxQzX7cXy5rMehMnue0Z75iBBVv5h9YDRCAAZbjobsnaXSx1LlRLT8CBBiGPL8TAW4UQhM5SFIV33cTInZ4ioTK0a0I2t00XMf-Y42FqWiYtS83GMQ3CGaHLUf/.../

https://dw.uptodown.com/dwn/I_DECozFCtDkxoSrCfm_v63lmaL3D7yYeRxGn5lXlALC4D_uK0m9hGmDEpezTB4zeerfFNjSO9imgdFUaffxeFM7tuNUnRpaqHYazKgGaAeHVBWkIMCr9473MmYCEEKo/4PyWB_dUkeptLk4zSHxNSBkYDw1GJiFZQGD4NjX0d3NuTwB-AqRP6wMO5srH-cRXGJ9WC0vTL7xheR2C9GNqy08BxwImIZasjyVeXW76mdxuThcObKuUZAGnVnqIqFMa/jKK46vfSrL96HKxxFkKuJ3rrrZPiDMOzaq7QRFpDE_1eNSESl_5aknS7EREz1dyLMGOwRDJor1KzlwdW-kZnf5v4AgrowoK40E6_LMUuCl6jTEL7EHsKePsItNha546o/.../

http://dw.uptodown.com/dwn/VWdIsupD9AInlU3p-RypzpwUtoM6k_Na2ucPxRqFAyIIkc2rWOnQiqKBGSy3Vg_zH4AUOB5m2vsUPgClcz0p4VLkm4j_6QfZPrT3Mp6fBtTtI7KhQfK-2J00vPWcQOym/ONQWe9YmkcKuExpuLqn5s3MB3MY63G2L5EdZqjU2SMuQjXopp7Jb0W9IPy8RMfvqxADrNxoKxikbFKmoUkvbujUhJoWGbmiHf6Ne2KLKXeQyGao0qH3pd39gv9O_5zTu/yLwjSBKq59riA1wMIUXZ7SQv-X1tc1-8dbSfdqJDFwTHpu5J4r8FvQwHHbiePeql3bJmQlscUT5-CpH1OICz2gGq4FFb-U0WtTKIq_5Moxro1dxjmzAsOL6FF1Mv1OER/.../

http://dw.uptodown.com/dwn/lVsmqcaY8Xx-ZxZGfitEC5zSouarOebLJb3Qyvj9M6aBJtTPtVDXkkmU6PqRhxirJNP1r7FjUSJZLwy62nSKPr-Fd-pKRrlau7KWkuBsWROisl3Hp4cmD0F2IwHdqxUN/ThVqAZAA9JhUofyjVaxlWv0J8iocjbjYm9Gi4_TAlHONymuYvXC-ej34mI-9yBZFj9LtrWvDwsVykhD5QMnJi_PLTD9frilb8reL64EOzZI-OL9bw6PpCD78ciHscM1B/Jqu7sZrN70Q37yAcW6AyfUVX4qEPsSJifvbRTcJ-ty-NlFz-0uyjcigYBzg1JdFYqkGk92tOAkpMYp34rsMd3sQZkZoqLS5fBOMxRq63p2dsdqJR1IDyjfw2LKDsbIcV/.../

http://dw.uptodown.com/dwn/pgqgyy8mrSqemCUUslLYeBhiIEVfuSi-7ZlprW4EKQaK83A8B2EwQp7GPuLYS0W3TFevPmP7CTLRXcFzuM6UWMVLnZi9QQDKVraS9HkM68mFBJ-YZyHyHA8wzJrEPJSy/Vu94KcyzmvKnw_ZRdbmYuPLT7nOGxl5-GcbaQRz9jdVRDXaKwyiqyO3mgiF9k1iu-mCH06oL2tioX0xECtW595Bf9iwjbx_Yloj31wnYfbjoYdl8GZmT3FfrsKdpkLIU/S5W-nfenfQci5SvgZoVZLRFsN8_rUeodsinRfEE2YALG18nH0hhevL5pvX11TuHSc0TAq8rp07Lh7c3N3KTvhyEAq2h8uDO4eS_9tq8HPnJNcsHj3vFKqBpd2qlTlR3U/.../

http://dw.uptodown.com/dwn/8q1x032r_eSqFdI6oaPbf8qjrX005R1QBLevoOSY7VELJk2ZwkgRj1DVnknvGrZY3FNFeF1vXp36KcloOHfPJ530AtealjoNNP9lJbiCj32pV_vSdVwP9v4UnjIjE5fy/ZJtO6DtPg6X2n9o6VH3_CigL5_lKiHVLHVg5Me4i8-W0-0ZqOpR01IJn2swrhwGzL5I-cUDgjcUUSGp-1xSATCQ6HJ-2JIkJH7Sdaga2Fy_gTfaujogVcMyk_QCcmfP4/MHaP-UD1l_YCbT-mU_0tfQqVltQEc93DLxbybCvZyZ9zSrxqGA239R35V7Q3VZd-Ac8raGX8OR4b6AuVf9Yjdo3_FL9rjutUfK6wXNo9rhb7-a8mVMw3EAN51Lza7nLM/.../

http://dw.uptodown.com/dwn/WXNLkvwqfZaPlidAqVsfH3wm5pdJz69dSBxKTjLT0dMVFH9QNkiMEftsE7YhByraDeN0ez4ScFxKYZbSWjv6QatbHPXQfEdRc2ELplUYB19TvMtbUiBidbZ2N2pDITsN/q0lP0Wnrs7wpCWgEcUhXoCNkt801CpVDQMWUkypasYkE-W5Ap7W2MLcAnwxgcwbwaMdQ1da1PzeeECD0RMhdNybKn6fNyu3qem8DRpJO41ieEymrazcqzHQ_ka8IVsPG/LXN-z4xFYO_xjA0m7ybelBnO7wbT9vxfc6OW5lVbf_iVylDiGjzNT3MCi8_AsMnqpoiGxK3GDgHOZbvjd2RTHCWKw-LF33SlykyFsrM8xLuSiS56Ajs2EPyfJRhZsQ18/.../

http://www.makeupinstrument.com/MakeUpInstrument_setup.exe

Scan makeupinstrument_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.