home

setup1021.exe

e-Sword

Rick Meyers

This is a self-extracting archive and installer. This is installed with e-Sword. The file has been seen being downloaded from e-sword.net and multiple other hosts.
Publisher:
Rick Meyers

Product:
e-Sword

Description:
e-Sword Setup

Version:
10.02.0001

MD5:
4d039ee3a6dca1836bfac29c1c15b833

SHA-1:
e05a45d9117c32de427acb13cf761bd0423b5a5f

SHA-256:
e3af4efeafbb351480cd70ac242cd1ff2b8c31d1492103f5d2d72b08d3ef2b4b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:49:05 AM UTC  (today)

File size:
50 MB (52,386,922 bytes)

Product version:
10.02.0001

Copyright:
Copyright © 2000-2012 - Rick Meyers

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\setup1021.exe

File PE Metadata
Compilation timestamp:
8/22/2011 1:25:06 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:Cbno4QJpdFm+AoCAyq6mF0S3N/+FNNoa8vSE+hYBDX7nZSGa9YfpndxVJztj:Cbo4QpHAtqAmNGFdYAhYvaaRrVll

Entry address:
0x6A83B

Entry point:
E8, 6E, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0...
 
[+]

Entropy:
7.9975  (probably packed)

Code size:
696 KB (712,704 bytes)

The file setup1021.exe has been discovered within the following programs.

e-Sword  by Rick Meyers
e-Sword is a Bible study computer software package created by Rick Meyers and developed for Microsoft Windows. The user interface is available in twenty seven different languages. Resources are available in over eighty languages.
www.e-sword.net
6% remove it
 
Powered by Should I Remove It?

The file setup1021.exe has been seen being distributed by the following 2 URLs.

http://e-sword.net/.../setup1021.exe

http://www.e-sword.net/.../setup1021.exe

Scan setup1021.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.