home

room328designersetup.exe

Room328DesignerSetup

Room 328 AB

This is a self-extracting archive and installer. The file has been seen being downloaded from hafa.room328.se.
Publisher:
Room328 AB  (signed by Room 328 AB)

Product:
Room328DesignerSetup

Version:
1.18.0.3

MD5:
f9b367b4ae00cfd8754a312bb2a0fb27

SHA-1:
3aa8edd0800b5f86c6f57f64eb5c4d5afd1a89c4

SHA-256:
e4b4b791707b089473ba3e92a67f2b7811c4bfe72bf77a6f0c27522e7041d4a3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 1:53:18 AM UTC  (today)

File size:
3.1 MB (3,266,849 bytes)

Product version:
1.0.1.0

Copyright:
(c) 2007 Room328 AB

Original file name:
Room328DesignerSetup

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\room328designersetup.exe

Digital Signature
Signed by:
Room 328 AB

Authority:
COMODO CA Limited

Valid from:
3/21/2013 12:00:00 AM

Valid to:
3/21/2015 11:59:59 PM

Subject:
CN=Room 328 AB, O=Room 328 AB, STREET=Box 5110, L=Stockholm, S=Stockholm, PostalCode=10243, C=SE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
78CB4868F00D4AAEEFB07718291875AD

File PE Metadata
Compilation timestamp:
9/8/2008 3:12:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:50mf/rp1k9cxKDIONdmA4nYfaMa4LzBL1h:5Z/rpxy9laxaL1h

Entry address:
0x1A294

Entry point:
55, 8B, EC, 83, C4, F0, B8, BC, 99, 41, 00, E8, 3C, C0, FE, FF, 33, C0, 55, 68, CA, A2, 41, 00, 64, FF, 30, 64, 89, 20, B8, 80, 2A, 42, 00, E8, B8, E5, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, 68, D1, A2, 41, 00, C3, E9, 49, 9D, FE, FF, EB, F8, E8, E6, A2, FE, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
100 KB (102,400 bytes)

The file room328designersetup.exe has been seen being distributed by the following URL.

http://hafa.room328.se/.../download?project_id=356303&version_id=1

Scan room328designersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.