home

setup_1166.exe

Electronic Arts

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
Electronic Arts   (signed by Electronic Arts)

Version:
1.0.0.1166

MD5:
4ee9a61637cb6d7abc8c6ee6f1d58b9a

SHA-1:
e7594ff9cc0b1045de1c744800288431d97b3ddc

SHA-256:
daf43d1b5b5f8fe14570ce8378beb82761787621562b4464557853ee20e76359

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:47:54 PM UTC  (today)

File size:
6.1 MB (6,397,232 bytes)

Product version:
1.0.0.1166

Copyright:
Copyright © 2010 Electronic Arts, inc.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\setup_1166.exe

Digital Signature
Signed by:
Electronic Arts

Authority:
VeriSign, Inc.

Valid from:
7/27/2011 1:00:00 AM

Valid to:
10/3/2014 11:59:59 PM

Subject:
CN=Electronic Arts, OU=Synthetic, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Electronic Arts, L=Redwood City, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0C618E5C55725B09158B62149C425BA5

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:o/0J5t8/DrElLGpsRMBCEDL1C582oHHcL4AfY2ezrvBDJfGAvP/BjnJytlIXUK:G0J5td90EoMnoH+fY2IBDJfGS9nW4

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file setup_1166.exe has been seen being distributed by the following 50 URLs.

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/e75/94f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=97263&instance=softonic_en&type=PROGRAM&Expires=1422326767&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HFTCdD1TX-akbgxAmYdt4FQq6tLP0tnltMlK17-u8gt1yh6pk3CYcT8b2eoJwIagl8sORwqhXHHjjKd99usIPn0CK~HPVY7Bg5ahxnxQz7kh~XluCJ7ySOavFR0LYJJDKkCaYCMzw2asMq6173-q5117CxPdKBCLFZyf6ai-9qM_&filename=setup_1166.exe

http://gsf-cf.softonic.com/e75/94f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=97263&instance=softonic_de&type=PROGRAM&Expires=1440894502&Signature=A5XCEQvMJNOwyQ-ORaaU-u6nwPofK4Tzedtvg7AXoQ9LQ66E2ZaKNpzYKTlQGJ7T1HhFLIfsmf~YwFlYgF50LS9ydhn~oJ7sbCw8uO8DMkCm7lQO2SamzdDlO2bZbBJK8shOpCnjyOP5Zp6acMnibMM6js93SBrxlFB8yb25oZY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_1166.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/e75/94f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=97263&instance=softonic_en&type=PROGRAM&Expires=1443001892&Signature=A8V16Il6tMpnBhE~Yt9GeN-HzPJsstPdz-Td50x556Ro1AJir06-EyvO8-UaySOKqNDbrS0EPMjEbBlmo2QGCQfRkO8Ul-MkXCsKEcQ3TnZH74Xr0rb32uOIlLjNiSbQ5K4LyWvO7gcz6~VuYU16~EKTdYS3my1q45U1h~DvC3w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_1166.exe

http://gsf-cf.softonic.com/e75/94f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=97263&instance=softonic_pl&type=PROGRAM&Expires=1438901554&Signature=GxvmJ71WtqOagxrEKRAfSo6MHeY-g1XUYbZPQZkFClmjNcaJIk5I~vmy3XDqRv0O6s3N3gZkcDKeMugzO0QieX~~e5rhfAgWVsTqb-uQuosqjFPn0oQoGqI-9gwONizUE1xYMeYuo-MLV39v3LOVPHLMAUuiUkDC4Ma50lGg4MA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_1166.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.bitsfarmclean.com/sy3 F5SKWIpBAZT7QSumwvinUpS_F HN1BHk5Pm7knKcOXll43hB3g1NiHLvkykXpq6F5f65E9Eh7k5f3km9hXYWI2k_eCYQ38iMLq_LGjtZNGLyvVn 8GzgH1KisUy1u5H b5y8N1NZcgkCUXt1C CJPtxL5o48yMpFgQNsevuEH2ug8dz2wHMQfJJ24PIHs_1JrFY9OTwrjs5ebGAN7Auza4xUtw==-G1sAAGRwXmtrOJmoUGzYgAOXLLFBB8DJ7ivbPunve18CfaNhXbd6LppFhtemqWG7nVAvZJ6o Rv9ulX64irLc0fzcdiMXfkyDLu3A41KMgLHUCJFkA==

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/pl/download/file/.../

http://filehippo.com/download/file/.../

http://fs41.filehippo.com/5821/.../setup_1166.exe

http://global-shared-files-l3.softonic.com/e75/94f/.../file?nvb=20150113133618&nva=20150114013718&token=0431278e329de751677d1&SD_used=0&channel=WEB&fdh=no&id_file=97263&instance=softonic_en&type=PROGRAM&filename=setup_1166.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/e75/94f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=97263&instance=softonic_en&type=PROGRAM&Expires=1439496234&Signature=V5fGkUvQHF1I2I2zP9ZEGy7rYestsB-R1SA38ynagYsUvc~BUZt33ULSQz8SniuzM2kYFlVb8D-X-x24~7hy1IqjU609NBO2NGFq7JKf4LlMvXAPqWbPoR0m~-ToIM2~ybfBSnnJ-EGgnKO6pUeGz4ij8rfDTGn-WzZ25YFGll8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_1166.exe

http://gsf-cf.softonic.com/e75/94f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=97263&instance=softonic_en&type=PROGRAM&Expires=1439060170&Signature=Ou0M25nyzC04y0WY0LLVkBhuC-Skoptc2PQsGA~Oo59ASn7j9h16GxLt5s6miZsb2bOBnEmtPEUGdxPI8JyrhNXdkSGwSldGc1nmf-Oh5ajKjzFowzVtdolzgLe0dbG~C7b4Cayk5SnnXSclM5Zk72UIwL7CSinJEmLj472Osp8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_1166.exe

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/e75/94f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=97263&instance=softonic_en&type=PROGRAM&Expires=1443735656&Signature=AdvZu1bfcHKKkATVUsqwF8Ub7MFg2DYdDp~6gDgIPBPBPqb4mUDJnFTzGjOwr7JaFjNxyUSfZR7xcQwWFBV9huk2axX25lcbsejH9OTLR95AX95M57JOCjGfQNDmKUogB~Y-tHXei2tcwf2ST6ucleLcH48lBJwbKsVXEdfd2e0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_1166.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

Latest 30 of 922 download URLs

Scan setup_1166.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.