home

setup.exe

Microsoft Windows CE 5.0 Emulator

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from microsoft-windows-ce-emulator.software.informer.com and multiple other hosts.
Publisher:
Microsoft   (signed by Microsoft Corporation)

Product:
Microsoft Windows CE 5.0 Emulator

Description:
Setup Launcher

Version:
5.00.1400

MD5:
424030556dd67a9b77726cca76379a9c

SHA-1:
27d58b35ea4bac0ab338544b9c8e69bf0d71af85

SHA-256:
f0cac4c20e4a678dd84e66a34bef25238331683be47be3577f1430cd0b93be37

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 1:31:40 AM UTC  (today)

File size:
3.6 MB (3,770,832 bytes)

Product version:
5.00.1400

Copyright:
Copyright (C) 2003 InstallShield Software Corp.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/25/2003 7:59:14 AM

Valid to:
1/25/2005 7:09:14 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610E7DA7000000000048

File PE Metadata
Compilation timestamp:
4/10/2003 11:51:10 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:F0/3nQ9QSGMYOPdKLc4NkwguV9OWafGNqjhCBlSuHmE7UxrVr4VDFr/KEHwSfgjk:W/4fGMTPQLco1gufrVqV26hgDFrteSdB

Entry address:
0x1890C

Entry point:
55, 8B, EC, 6A, FF, 68, C8, 3B, 42, 00, 68, A4, B8, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, C0, 31, 42, 00, 33, D2, 8A, D4, 89, 15, 18, EB, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 14, EB, 42, 00, C1, E1, 08, 03, CA, 89, 0D, 10, EB, 42, 00, C1, E8, 10, A3, 0C, EB, 42, 00, 6A, 01, E8, C0, 1C, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, C0, 17, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
136 KB (139,264 bytes)

The file setup.exe has been seen being distributed by the following 17 URLs.

http://microsoft-windows-ce-emulator.software.informer.com/.../

http://ttb.lpcloudsvr302.com/download/request/.../ZL36bgPO?__tc=1390399126.197&tgu_src_lp_domain=www.allsoftdll.com&ClickID=u2e23699052dfbe9a8544fab39a&PubID=111547

http://s10788.chomikuj.pl/File.aspx?e=YQBNG72-a4v6xs1rJx65rP6unE1WU9dSSymmEghcP7M2S2qZ4AlmVPtGzxBIA-fkF7FBn3dQPgNUdFe7sSTVVOZs4S1R-1FgrfUMceYWY_Vh8ePE4QaCLl09v5seJX8i4gLtfXRelyWcqpkmYs0uQKHlfgGsXluJVSLyOTcSYE5FRcotWhmicTRboE14LCSq&pv=2

https://download.microsoft.com/download/7/4/4/.../setup.exe

http://liveupdate.symantecliveupdate.com/upgrade/NSS/SymCCIS/Production/NPI/.../Setup.exe

http://kll4pn3o.idjqm6i6.com/uO3iHM-CKtg6MkEM2G1ZR-Wl1RTNtsB5E5ri_yL_5-vzUd-i7n9U3Rk4mlrXVJJ8ZUKhLEI-Hs4lZAZD_oB1Q7z2Kne1Ekcr8fy49yXu6JUro_BHIZl2SOAbqLBTc6Uo?sbb=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

http://ttb.dlwlyoursoftlist.com/download/request/.../3UurdOc4?ClickID=144cc22fb03e4978a4e75bead482bee7

http://flv.softpzivrubajjui.net/n/3.1.12.9/.../Setup.exe

http://flv.softpzivrubajjui.net//n/.../Setup.exe

http://2.track342ut.com/.../531dea520e383?programid=123311&visitor_cid=20wHad2dQME13EWM1ml3BU1wVaMa000.&param3=176681&ce_cid=20wHad2dQME13EWM1ml3BU1wVaMa000.

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQa5heoXqXiWKYmmCkgpSJkGqXYZ57lbdqbp5joXs?dp=jBrbXVnXwKhViUbeWmLiOqzp-wwnbj_tzQtWpFqv37909BoN3CfKbsOAMJooc0ZF7MP0cpb-XWnZr4dU3Urw9GbR1BAsLdoFNIjLFwIgsCmHAcaNw7HQ1f9acuYfILauLFPOCtntvZkG-AlwW_X0oXern5n7QalVUPk5j5YSI-a2Xyj0uWL57dU0AE9AAVXZ7fYhYmST61q8G0DN8RMqET-RkdM83maAfeSExoMAVlOdxV_DQOfPlJu1j9PKAS9foulUjPYi7xK4uar2_gLlA2bUign4-iRbPMb53ZHVOY4lVXnDR12_n0gRdLbSWbGAv162mn1AJ5qthMEZnbk4RtUnX0BQbTdv7TDXZrp_NEYRnGxOtc4UVvU09xmwgfl7JobyMLOpHRbhMLTaOvqtvfcMrzSssATB9BQ

https://install.oinstaller5.com/o/.../Setup.exe

http://dl.down324.com/n/3.0.17.6/.../Setup.exe

http://dl.down324.com/n/.../Setup.exe

http://flv.hs1dmr.com/aff_c?offer_id=44&aff_id=1002&url_id=76&aff_sub=1819415047

http://secure.oinstaller.com/o/.../Setup.exe

http://download.microsoft.com/download/7/4/4/.../setup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.