home

pl2303_vista_32_64_332102.exe

InstallShield

Macrovision Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from serialio.com.
Publisher:
Macrovision Corporation

Product:
InstallShield

Description:
Setup.exe

Version:
14.0.162

MD5:
2d9c85e85db4631195486ea7bc331060

SHA-1:
93f1ea0b29c593fce66aa3bc3d88e96a6055ecbb

SHA-256:
4ca456e16cc7e321e704f4ce5a682647825695547818dac35bd30ad158ebc3fe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 5:30:25 PM UTC  (today)

File size:
3 MB (3,124,668 bytes)

Product version:
14.0

Copyright:
Copyright (C) 2007 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

File PE Metadata
Compilation timestamp:
4/18/2007 7:08:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:35xEA5jOuic/5LKqLhtbL/noQ3ht5cx83DfoNWYBiCKhSOoSvbJN50KC+:3PEA5jOpchKqLhZPoShbcx837oABKeNF

Entry address:
0x22094

Entry point:
FF, CE, 81, C5, 33, 1B, 69, E5, 1B, DE, 80, EB, 9C, 80, C3, DE, 69, C0, 59, 7E, FA, 07, 85, C8, 86, CD, C7, C0, 8E, 71, 2E, FB, 86, C9, 69, FB, F1, CB, AF, 8B, 81, F5, 86, 28, 00, 00, 87, DF, 81, EA, B3, 6A, 9D, 9D, 85, FE, 4F, C6, C5, DD, 84, F3, F6, C3, 68, 0F, BE, C6, 1C, 7D, 8B, FE, 89, DA, 30, CD, 25, D8, B2, E6, 67, F7, C1, 7E, 93, BA, 04, E8, 18, 00, 00, 00, 81, E7, 93, 1B, 10, 26, FF, CB, 69, C2, C0, EC, D7, 6C, 8B, CF, 69, E8, 7F, C6, F4, 85, 3B, D6, 8D, 05, 89, 59, D8, A4, 0F, BE, CC, 8B, DB, 8D...
 
[+]

Entropy:
7.5449

Code size:
288 KB (294,912 bytes)

The file pl2303_vista_32_64_332102.exe has been seen being distributed by the following URL.

http://serialio.com/download/.../PL2303_Vista_32_64_332102.exe

Scan pl2303_vista_32_64_332102.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.