home

setup.exe

setup

The MathWorks, Inc.

Publisher:
The MathWorks, Inc  (signed by The MathWorks, Inc.)

Product:
setup

Version:
13, 0, 0, 0

MD5:
0e7dd8b1a0e0e8ee81e231cf7da61c50

SHA-1:
c2042e16d32da34d93af36fb17ea66663a7bb375

SHA-256:
ce6a34995d217962b28634110471245dab6cb643fd3bff5bd1853b6775c8323c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:56:44 PM UTC  (today)

File size:
171 KB (175,144 bytes)

Product version:
13, 0, 0, 0

Copyright:
Copyright © 2001-2013

Original file name:
setup

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
The MathWorks, Inc.

Authority:
VeriSign, Inc.

Valid from:
4/2/2010 3:00:00 AM

Valid to:
5/21/2013 2:59:59 AM

Subject:
CN="The MathWorks, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="The MathWorks, Inc.", L=Natick, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
32FAAADB10AD6DC7715ABE17378E7518

File PE Metadata
Compilation timestamp:
1/17/2013 9:17:30 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:jMhbWxWQ0C6fkX3L7IGhBsdzWGSD9un/N6L937gPTrxuOBeZ4:gBiWQU831B/QnYxqTrgOv

Entry address:
0x1B37

Entry point:
E8, 93, 2A, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, AD, 36, 00, 00, 89, 45, 0C, 8B, 46, 0C, 59, A8, 82, 75, 17, E8, E7, FB, FF, FF, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2F, 01, 00, 00, A8, 40, 74, 0D, E8, CC, FB, FF, FF, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, 89, 5E, 04, A8, 10, 0F, 84, 87, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E, 89, 46, 0C, 8B, 46, 0C, 83, E0, EF, 83, C8, 02, 89, 46, 0C, 89, 5E, 04, 89, 5D, FC, A9, 0C, 01, 00...
 
[+]

Entropy:
6.8183

Code size:
79 KB (80,896 bytes)

The file setup.exe has been seen being distributed by the following 5 URLs.

https://doc-08-bs-docs.googleusercontent.com/docs/securesc/3kan4935l5kkabeha3qodi0q25oik6tn/p8om05m6bf3gpvf24friaas71v5u3fd8/1445954400000/15942370482771206183/.../0ByrvTK5F-vctaE9EZjVlOXhRZlE?e=download

https://doc-0o-c4-docs.googleusercontent.com/docs/securesc/oa8q13e5l858qkk52vvnmd4vohbv7457/hdedef9gcqpp5j5vp7mpknllnsnlgoct/1477612800000/15275252961295024723/.../0B3xtvGSEarKDcW0tb01QS19nd3M?h=10094473517826682486&e=download

http://e3hrhg.zp9dp8r.com/DhMKdLLcVMlBH5CogHY1AmdFunsNtKoP0GRJVi1pc-cDgorYkg0WFKhP7WzMw53CcsaXm4lAVILW-e0lX-qM34HVBZxlwOlQKMjnmEA-Mt_qiAx5V90gufaVpGm1-z-2?sbb=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

http://ttb.dlwlmysoftlist.com/download/request/.../wxX75Z7P?PubID=79_3527_3100&ClickID=7766015158

http://flash.zuqiuing.com/down/flash/.../down.php?sid=246&dv1=ad240-gb&kw1=ad240-gb-xx&uuid=2efe44a9-3123-4c0f-672d-e3147d625bd8&dv3=2efe44a9-3123-4c0f-672d-e3147d625bd8

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.