home

Setup.exe

Business Objects Setup

SAP AG

This is a setup and installation application. The file has been seen being downloaded from www.cdp-ky.com and multiple other hosts.
Publisher:
Business Objects  (signed by SAP AG)

Product:
Business Objects Setup

Description:
Setup

Version:
13.0.2.469

MD5:
ecdea9bf45295eaaa82700ba1f8280c0

SHA-1:
bd7eb47aeb8aeb2b56e1e6b20df4037bc7cac224

SHA-256:
8f81aa1a958884a80cf1b7724af62850e4df053ee34cd46d0e5e44490b02562e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 11:29:01 AM UTC  (today)

File size:
685.5 KB (701,944 bytes)

Product version:
13.0.2.469

Copyright:
Copyright 2011 SAP AG. All rights reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
SAP AG

Authority:
VeriSign, Inc.

Valid from:
9/9/2010 3:00:00 AM

Valid to:
9/9/2013 2:59:59 AM

Subject:
CN=SAP AG, OU=SAP BusinessObjects Production, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SAP AG, L=Walldorf/Baden, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5FA2C0059E2E01A2B14BFCF953AEDD5E

File PE Metadata
Compilation timestamp:
11/8/2011 2:03:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:LgdGHt8Fw1YkINNq7SVrSpSkrOtX/9ZHSHcFtv1ph+hRbC7mNAyWAneKu33CpQge:Lgit8FwpIjmpnKp/YcFx1aQmde73sLkr

Entry address:
0x4496B

Entry point:
E8, 7D, FA, 00, 00, E9, 17, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 80, E6, 48, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 80, E6, 48, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Code size:
468 KB (479,232 bytes)

The file Setup.exe has been seen being distributed by the following 2 URLs.

http://www.cdp-ky.com/autoupdates/Software/MicoV7/Crystal Runtime 13 for 64bit/.../setup.exe

https://doc-0c-4s-docs.googleusercontent.com/docs/securesc/ukgjf18oouldqfavqir6usm5h57mc150/asl2rhg5jd0hadvsdpm6rg1dinmk8j6o/1453190400000/13535409241470648555/.../0B7fpBhhmj62BcVhIcmlzZUNyZ2s?e=download

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.