home

setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from files.getsoftfree.com a web site host known to distribute potentially unwanted software operated by Air Software.
MD5:
ec07b14781d554918b8d679d41733ed3

SHA-1:
7673c28fd10f54658baa54eacb568cae4a8a476c

SHA-256:
12d6e6d6d728a96af6324feceeb4f2ca083aa4c161859d60fe4c7fbee3ce8677

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/27/2024 12:28:11 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.4959

Comodo Security
Packed.Win32.MUPX.Gen
19997

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
23.00.65.141103

File size:
841.4 KB (861,600 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
2/18/2014 1:12:16 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:/RO13jL6mD14RO13jL6mD1h857qUMcp/1xTvSBqCFo7FyrY:8L9xL9SB9/iZFo7h

Entry address:
0x267150

Entry point:
33, A3, 64, 70, 37, 01, 0C, 4C, C4, 15, C7, 1C, 8B, 90, B0, 81, E8, 80, 04, 03, 0B, 78, 1B, 52, 03, 13, 71, EC, 8B, 60, 20, 03, 32, 30, 67, D4, D8, E0, 15, 23, 35, FC, 4B, 51, 48, 87, 98, A8, 8B, FB, E4, 71, 51, E4, B8, 88, 55, 5D, EF, 77, 0E, 14, 60, 96, 1B, EC, 0B, 52, 08, E7, 7B, A0, 30, 05, 14, 0B, 80, 15, 20, 72, C0, 96, CB, 09, C1, 3C, 77, 7C, 11, 0C, B0, 40, 61, B0, C7, 7E, 4A, C0, 0A, FA, 1B, 18, 08, 5D, 31, 75, 40, 88, 0F, C7, FC, 28, 0E, C8, 83, 1B, 70, 10, E4, 10, 5F, 40, 5E, AE, 1C, 58, 11, 14...
 
[+]

Entropy:
7.9210  (probably packed)

Code size:
784 KB (802,816 bytes)

The file setup.exe has been seen being distributed by the following URL.

http://files.getsoftfree.com/get/click/.../?uid=1781441114&sid=103577&filename=Setup

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.