home

setup.exe

MD5:
ad73a76f2089826b416a0977320509ec

SHA-1:
5ab3072f1fe553da636552f8a7306fc8463029dc

SHA-256:
10a3f307808bd199a4c5a0018deffce9f07eae45faa635f5874d59e66380d072

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 6:08:43 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Evo-gen [Susp]
151210-0

VIPRE Antivirus
Threat.4786236
45730

File size:
397.3 KB (406,796 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
9/8/2014 7:26:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:ml4vuL+4AiCiibq859PpOn201/z7pHmJI9ftR+Vl7o:ml4WL+Riibq859P82cb7pHmJ0ftRwo

Entry address:
0x627CE

Entry point:
19, FF, 84, 50, 14, FF, CD, B7, 9C, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FD, FD, FD, FF, FC, FC, FC, FF, FC, FC, FC, FF, FC, FC, FC, FF, FC, FC, FC, FF, FC, FC, FC, FF, F6, F6, F6, FF, F5, F7, F8, FF, 9F, 88, 7D, FF, 7D, 4B, 17, FF, 98, 68, 2A, FF, 91, 61, 25, FF, 8E, 5E, 23, FF, 8A, 5A, 1F, FF, 83, 55, 1B, FF, 7F, 50, 16, FF, 7F, 50, 16, FF, 86, 55, 19, FF, 84, 53, 17, FF, 83, 51, 17, FF, 82, 50, 17, FF, 80, 4F...
 
[+]

Entropy:
6.1931

Code size:
386 KB (395,264 bytes)

The file setup.exe has been seen being distributed by the following URL.

http://lax1.ib.adnxs.com/click?LahIo-Se5D93Bps1ex3hP5qZmZmZmQNAdwabNXsd4T8sqEij5J7kPxgWkpFfUBEMHBLTHBOiZHIivwxUAAAAABTOMgCTBwAAdgIAAAIAAADrIRwBCmEHAAAAAQBVU0QAVVNEACwB-gDnOgAAYrsAAgUAAQIAAJQAUyI6HgAAAAA./cnd=!pQakPwi027QCEOvD8AgYisIdIAA./referrer=http://webmaila.juno.com/webmail/new/6?session_redirect=true/clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=lax1CJykzOaxwqiychACGJisyIz5i9SIDCINMTczLjI0LjkwLjIwMCgBMKL-sqAF&tag=3329556

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.