home

setup.exe

Open Source Developer Jason Shackles

Publisher:
Open Source Developer Jason Shackles  (signed and verified)

Description:
Setup

Version:
12.0.40629.0 built by: REL

MD5:
68edcb2a8cdb2eb0e2d115253c4e0195

SHA-1:
5e99c971450c9e182c65a73d062637c04c8dd83d

SHA-256:
b448aad48a54f6d5af374715ae458550ce5506612d41189480064de49a302c0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 4:22:37 PM UTC  (today)

File size:
473.3 KB (484,696 bytes)

Product version:
12.0.40629.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
Open Source Developer Jason Shackles

Authority:
Unizeto Technologies S.A.

Valid from:
5/5/2015 10:51:14 AM

Valid to:
5/4/2016 10:51:14 AM

Subject:
E=jshackles@gmail.com, CN=Open Source Developer Jason Shackles, O=Open Source Developer Jason Shackles, C=US

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
57ACB5C1E8106AB5E50729ED937A53A0

File PE Metadata
Compilation timestamp:
6/28/2015 7:45:16 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
6144:UDI8JDRdozHIjc1eBEhHE52AlOpK4sL5nEHFVeu22ZXL//3Vpb4FWaVgY7mohHhC:UDzJDR6qlSKlLVr2ZX+mo523

Entry address:
0x2FAE1

Entry point:
E8, A9, 65, 00, 00, E9, 7F, FE, FF, FF, E9, 02, 32, 00, 00, 55, 8B, EC, 56, FF, 75, 08, 8B, F1, E8, B1, 32, 00, 00, C7, 06, 44, 65, 40, 00, 8B, C6, 5E, 5D, C2, 04, 00, C7, 01, 44, 65, 40, 00, E9, BC, 32, 00, 00, 55, 8B, EC, 83, EC, 10, EB, 0D, FF, 75, 08, E8, 60, 6D, 00, 00, 59, 85, C0, 74, 11, FF, 75, 08, E8, C1, 6C, 00, 00, 59, 85, C0, 74, E6, 8B, E5, 5D, C3, 6A, 01, 8D, 45, FC, C7, 45, FC, 4C, 65, 40, 00, 50, 8D, 4D, F0, E8, 43, 32, 00, 00, 68, 4C, 10, 45, 00, 8D, 45, F0, C7, 45, F0, 44, 65, 40, 00, 50...
 
[+]

Entropy:
6.0703

Code size:
323.5 KB (331,264 bytes)

The file setup.exe has been seen being distributed by the following 15 URLs.

https://downloader.disk.yandex.com.tr/disk/9778a6aa5b1746407812ce36c9beb2373f43b9849fb64f6e0ce1b6bea7ac7ade/5866aa2f/.../x-msdownload&fsize=484696&hid=2656cebe1fa4ec76fd325d6d511a8967&media_type=executable&tknv=v2

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQap5knn-XimKYnmWjfpW3YmmYYKF7w49ncZ1nnA?dp=F-hwgNJcgxYSVt9NZivp1f97TzruZ9El8gNKbePi3IvdsNOTUtHX-mX7hZOD9529NYg9KcELMLjaFgsHuv7ufUIeFD_NJ5x6TanWoBuBRRzbGeVowvbBn_bVAAoETqQHyxWKPNP3_QVF7iQDj147woG-yxH_7ONPW08_GV5sMnl-PvqP79ISMGdRwz9I8hnTY1ZY_ycb1UQsp-R_WymhCGv5ggUWWWH799rpZ2tUkr8XjJ4wMZJu0EuJHLVrtdX-ytGs4dhVb9-z2W1jnUposrzzPx9Tr0Z1RbsMZAdPiTEJqZav-bCfi8b0VVNMjTv37Y4Kf62WOmmDZ0zS1hIXlp7LndJ-T5oUrlSwmGAWOjuRgmWG-Vs

https://downloader.disk.yandex.com.tr/disk/6473638e8be3f15580bcb27a9e18b7ea3fc533287164330ca2b528ab1b01221e/574dd558/.../x-msdownload&fsize=484696&hid=2656cebe1fa4ec76fd325d6d511a8967&media_type=executable&tknv=v2

http://gsf-cf.softonic.com/14c/c9e/.../setup.exe

http://idlemaster.software.informer.com/.../

https://downloader.disk.yandex.com.tr/disk/581ccc4a6545b060413c0b83a8288888c3010a8e79fb30b0875c296a360d1685/5732539c/.../x-msdownload&fsize=484696&hid=2656cebe1fa4ec76fd325d6d511a8967&media_type=executable&tknv=v2

http://download1646.mediafire.com/w3knd6269jug/.../SteamFree.exe

https://downloader.disk.yandex.com.tr/disk/7a19e09598db323c8bdf1b52b47a8167c106cdb8bf3c09d715a2da8202a90b67/5761e9ef/.../x-msdownload&fsize=484696&hid=2656cebe1fa4ec76fd325d6d511a8967&media_type=executable&tknv=v2

http://www.levelupgames.com.br/redirecionador/comum/.../gerenciador-do-jogo

https://members2.fraps.com/.../setup.exe

http://www.fraps.com/.../setup.exe

http://deploy.digitaldnagames.com/deploy/.../setup.exe

http://az804326.vo.msecnd.net/.../Setup.exe

http://steamidlemaster.com/.../setup.exe

http://www.steamidlemaster.com/.../setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.