scrivener-1900-update.exe

Scrivener

David Johnson (Literature and Latte Ltd)

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Literature and Latte  (signed by David Johnson (Literature and Latte Ltd))

Product:
Scrivener

Version:
1.9.0.0

MD5:
2e70de020eb7fe8da02fcbf6056ffa9c

SHA-1:
1b980972041bad1e2e4e68e67027c5e4d2960f6e

SHA-256:
d8ee51395d40a303f77686c81d586d0b3596b7fdb75adaec38b38d0809bdf48e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:44:54 PM UTC  (today)

File size:
83.4 MB (87,462,256 bytes)

Product version:
1.9.0.0

Copyright:
Copyright Literature and Latte

Trademarks:
All Rights Reserved. Scrivener HQ Pty Ltd.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\scrivener-1900-update.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
10/14/2014 1:00:00 AM

Valid to:
10/14/2017 12:59:59 AM

Subject:
CN=David Johnson (Literature and Latte Ltd), OU=David Johnson, O=David Johnson (Literature and Latte Ltd), STREET=Lowin House, STREET=Tregolls Road, L=Truro, S=Cornwall, PostalCode=TR1 2NA, C=GB

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009908D94F2C7DE794AEAA884DEAA325BC

File PE Metadata
Compilation timestamp:
10/14/2011 12:30:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.20

CTPH (ssdeep):
1572864:y6xfLplPh0/l9L/hvu53xgElyk03/3xDH6FkF2Q266s:LLTJ0/vL/h25qElyTPx+Fka66s

Entry address:
0x27A240

Entry point:
60, BE, 15, E0, 5A, 00, 8D, BE, EB, 2F, E5, FF, C7, 87, 40, D4, 23, 00, 23, FE, 3A, A0, 57, 89, E5, 8D, 9C, 24, 80, F1, FC, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 6F, 80, 27, 00, 57, 83, C3, 04, 53, 68, 22, C2, 0C, 00, 56, 83, C3, 04, 53, 50, C7, 03, 07, 00, 04, 00, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9...
 
[+]

Entropy:
7.9990  (probably packed)

Code size:
820 KB (839,680 bytes)

The file scrivener-1900-update.exe has been seen being distributed by the following 19 URLs.

http://dw.uptodown.com/dwn/194g7WIE5znDe9P6ndz_Qe7MCBpH5xw3XtdmS2ACRNM7phlqhhXTp6uJRWRZJexylGAoOBMBoMe1A-OAL8uNt4-ODAC0jTOkGbKts7ZKJaaLBTsNFyAcnsN6r2tzvkKc/wCnWGMOTrsJoDhgTcM6fQv-eX_H2bKEkLxJwiZ2XcWOPzmuTpIAiB3SpTxxmlpJXYu-VZ9g9sb1DvJd9gJu9kDAiQJkQkTvqz_ka3Ycppc6L6YhhsyuM0xqfl1iHj8iw/FB2vSBeiDRmSgNrCYlraMBLWOldDf8x3jvP9uK-xLmCFk3fkLYAqZJwM6o8IB_haPQVyThcQ4jm8vJGJB_zyLDCoWF4IycPgGCiiym_auMUPPbeEM0up2ol_v0HsaT75/.../

https://dw.uptodown.com/dwn/fpUp3QRxW4fBGyKLVG8BcDLBzALGwCySKMqfb1deWmfLaUeK20ESW-KbeYjhp9qe0DZvX1Z7RedbsoEjEgI4E46nr-VF2D8JvfHfOZiP9o-tSDPaj2fLJgwlLoBkb1Qh/AOgXIN8qT0OmXp21DU4DKrIqbrMpgh6e5kLWUqVkHrPePMQ0efPmNOYWx3JFIikecCYvIsOJkiqASFHmJ2dmIJXbRK87my9IkQlFbhgYBuMkT-gZIu7MLUwfkukZemRy/2X45Q9-ryf_Fi3Du21gyDCf5Hyjza8Pd7DkCcPK0EwKvkwf0Pk8siiixUsLytP8iTXwmm2G2dzz5LBXoEvuPi0s4ozJlOstrLoXPaVUmie-kZQB9GvZ6j_yEHXYD4Y_Q/.../

http://dw.uptodown.com/dwn/hdT6JPyubhGhXo0D__gQsPR3q9MfdfaYZTuTHwErDgJ7bG3BtfIPBJkxvXw9WTzN2-vphDvNV7Y8vgLrnMVRGImaXC6JWDT0L8Vj3_-3AdkWoRrYl7Ya6VkgEeX-6QVM/x0lN8AnG-yjb2DruHqqPM4RWOBCfaoosLR7Ty5ZtZSL_dWUXPrSigEijNEyhAV5nZr7voxYfF4xF2nB0grf9GaXG6VTFP4VK1fibF_Ri_155ef71mCa8Pwm35ERehS-h/.../

https://dw.uptodown.com/dwn/yMl7P3lxoclp6ZzfpHAXdhLoQ5Pl6IQKWGb8ljiFS7tmQn51SfOvgoOhOLByr1AsqvuTen4pX9Of9OWdx5-5dHKVmfNrFTsmDwKDLXGN_M6fP_RH5IrYFX_USVF0zoRr/at5JrJwPlyiN-9rIkTs8j9bM8t1iDvfnaECzQ6dknp2gHp0L4P6w9pQgpIj2YUZQdqlNHvsmi5arfpHBEc5nMnmZ19QqTCYpRqwtpXoDVPmsEzDm2v5EY0gkhYw2LwC_/pEtRJfdeO1O8bYXdYhRsRrljcFKz8UoNfeRenqML2-WhCvrWMhIp5X7Fs1-9-h41VUJKDbY-2AbKUe-x34R-tj9PWm2Srkulk4TCRAORJdTfiFt1WTPj-lHsFCahswr1/.../

https://dw.uptodown.com/dwn/NL9lCoBJa73krkxhLuvEsUxyJNJDa_4GYz2rhTA9klzhbsu7IFfWbwW4WrqnPVtkW06c6hntqiNjOIjDjTHp8ufSse2b4AS5KVqp1qrJJNUy8nPTqMMcmw9XTy6sk3vf/zaMFiE_pwWBIKQi_Ikvl_TwZmDa_uUeTwcuiVRAfQtxP2Vra3yDKT6JcmJ-VFCVDBxUp8NBIW3bTArH2wXg7iqAew0-oWgR-HMKs_8LQoO0FSblrAqjv17c5VGsoA1Vv/EDPY6iMA1HOfd1fiYzNzYrzRW4A40pWIFp1M0dpfEoRwKWji6NpBDP2bKDxnQfHowVLuXxvEPSyWcWrWZ2ok6c2ZfR6-cLoVmqoKPUyqmzs6sl3LAYcg9Uz4zwXC8zhH/.../

https://dw.uptodown.com/dwn/TABaVYRg6FjCmyL2oLWT805_xAT3umbI5f58eyPrH7eV71lvA-S0Ik5fQZ0eMSlBj5D-wEdM044mju3mJyMZ62wIRX3uy3G19RfGGQRCwbx8KRZFPdkk8N7WVis-dy_O/dsirF_TAS5s7o069c7ZePf9jF6O8Qcntl5cA39gSRR2Td2H4R7SAWMungwHmK0jzkNAFND_eWpVu8_r32b6i4QAn1vuWhRIIB9GSs58XqXWYu17kV7cBO2cdkH9229QH/bYNY19wnIWsPOaqZBazPAmHrETdJ64Qlc2aVAhp4TWinNf2jY62rtd4OysSLTVcUgU3QIFIjlwN7Pkst-BrxDnGvL_l1WqRGc2Q6Z5UTCe5j3K_uc_yhkc2RxaobL1hn/.../

https://dw.uptodown.com/dwn/nzPqIQRhboibKsZwUVVt-Tg78LWwS3cZgqWVwZA4OgDvWWQxw_Mpih9U6FuLlBqIXErgdzHKpxDdlJBI2HzW_FIWnfPDDykf_4xSMDYr4d7FRZJSjZHu0k4eEftbtI25/mKpoQgWE4IxOB_9hMvsE6_QlokW_5Q9bxqGwxiw3bl-decPwnaFMbn7ymRZEHKuP_qdcQENbt4CJW0TF3OvRWYs3K6-Xp8rX09-ulw_FmjpCOh7uosqQMggPwQZ7Cmd1/ZOq-dkIRwMXx1mUVDVRFdiCXReGOtROVCfeM7bvXJdPrGJH8kwVWDeZS3RS8KAtXKbOgD2Qg3r_XbcxkLQX6yzOb8zwHSH7_zZ41VXtjBQ558NAQS3ANUpzeD1-ExT8F/.../

https://dw.uptodown.com/dwn/OLqwvpllHbUc4ILO6-VF0gs0u2BsUniTpMeq3tQGVF8zljLLQrCiH0Lta1M99Zk6J3FXsuJP1DWLSwHtaNLMwzt12UrmBOnnTVTk2KHhkKYLKhCiQzfEJWQwyPl2IMxF/kCmjDM8zpsmzLreLALmNzmnpmUjvjvDdOua924DW1-uekHlWDOTQYZUhvnONz2Rg79i5pqMPWcdmK4vYKvn_ORGzx-WOWtOGYcsQlCAIap9m-YDsqoZEYypxmVm9t2xJ/JgapH62N0k4ZjMk5XmUhB5ELW0oqRB65fZjmT5bl-MBVuyJobxtrYi3b17XzWI11SLKJ_gw0-yZWUjAI3bcUMmMf6Lop5-Iw5F_g-Q0-i0XhdLDQaF96NUQBpSgn1Phl/.../

https://dw.uptodown.com/dwn/77GLPAO6aAgZfmFzUc1pNBMsjqEmDx8qt3J6xSIh16um3NrslN3WwstjwCm-WUxkGnpjeRgQ66NltndLUTITvJdG0jOyGCc3CkhcKWwC_SJTi1YaZauWUbaPeGVkz1jm/_6QXHBPKJG1NmklaPbbD2Nq-i-XjB9eQ5EYt_jipdCEPl7fa_Oh_44uD1-LgENN4db2COcdmU4DKIPhgWJWXrnyHNSQp6O1ZPGN7M-JtljzdBhVYfvqfzZvZlIdxF621/4pTmqKMkgcFmM3yCO5T8AiVKc8mOZFfyFqUcfkQgFIpXIwWNsDEtesvvQikZLoGReZbZCzt2OWWQ2bm6GUqMvnLh37VcOtsrqaA5GHTLRWXuf8k7jJux91_NSroal1lz/.../

https://dw.uptodown.com/dwn/uGOgfAmdGs96toDSn8GPF4LBhcas8Quq5WdUozVNdvh89hMUfisSYf2-IMf8dWxP8LyLzw9Lqfdg19UZRrzCQr4KjnqKrIJECvt7rFoCTDL1GWZqzouolcBqfVqPvYK0/1mQeo_Sl0hzxwXIrwL4vCSgeB6lVBaoOr7v8sb_pKsbYZRJKvRyj3Lg7hX5QPwiYKKSAVdzha2Szwcp7oE2D7akvd5JOsmwyp6t2uxHxmplxRPD60D3qNF_HFJpkgWW8/8Vh4cMw7X63OjpW28kAJdcRNGqQIPG_XWmNlTX2_WIGHMTz-ZCfaZYo0iOnNAkjqf4cHdOnRYurLLMxbyB4FjZEocIKIhFUJ6zAFMqpkekzz39VN5Vv1tz6RddUArI4v/.../

https://dw.uptodown.com/dwn/qxxrHbLkdc46ORkPnOnmVa9jaXonD1wZr6VyyQFvgPKn9-z2d5_E8tiz8TnRCQqxIBAbxYYRIXyNTunoA_1RnaVBlpI6y4twRwkAF3urq4qI_rjWYmN-Eamvc_0ivYTk/ZIdIcIKOnVc2D9Us6vnvdSN97GmIZX0oALyI6uenJdakN0-_7iA5Uyx8BTOoZXHGo_DfLLGjJbSvvCBwyA8J3AZ6FUCso4cJXF8eA8wDCMzwPM8aCGCDmq3W5TSNXTv8/ydnlQaxz4lYKrpd4K3BKniZOV0X8NTYthPZK7A7hBFvwpuoJjFPJo9lrUKMNcqkDep-k0MpiG4U9WsG8wYz92X-atA5t1X4DHANNlDOVs2gl3sqm-13QWAS1vjwdFnib/.../

Scan scrivener-1900-update.exe - Powered by Reason Core Security