setup_hp.exe

SIAD

The executable setup_hp.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
SIAD  (signed and verified)

Version:
0, 0, 0, 0

MD5:
2b07c179e2e689ea96d38e592fb40932

SHA-1:
c15d35a9f46ea39931d287e842db9cd74c18ae86

SHA-256:
cb33e3b52f1780030840d4ac4d68fa75848db5b71f81f3cb825fb8f032949a9e

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/29/2024 2:41:37 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.2.28.18

File size:
99.3 KB (101,728 bytes)

Product version:
0, 0, 0, 0

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\setup_hp.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
5/30/2011 9:00:00 AM

Valid to:
5/30/2012 8:59:59 AM

Subject:
CN=SIAD, O=SIAD, L="Kangnam-gu ", S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
381CE30ED8472A4E13661E6BC55432C5

File PE Metadata
Compilation timestamp:
8/24/2011 10:09:30 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x4525

Entry point:
E8, E6, 4D, 00, 00, E9, 89, FE, FF, FF, B8, 55, 9E, 40, 00, A3, 30, 4D, 41, 00, C7, 05, 34, 4D, 41, 00, 4B, 95, 40, 00, C7, 05, 38, 4D, 41, 00, FF, 94, 40, 00, C7, 05, 3C, 4D, 41, 00, 38, 95, 40, 00, C7, 05, 40, 4D, 41, 00, A1, 94, 40, 00, A3, 44, 4D, 41, 00, C7, 05, 48, 4D, 41, 00, CD, 9D, 40, 00, C7, 05, 4C, 4D, 41, 00, BD, 94, 40, 00, C7, 05, 50, 4D, 41, 00, 1F, 94, 40, 00, C7, 05, 54, 4D, 41, 00, AB, 93, 40, 00, C3, 8B, FF, 55, 8B, EC, E8, 96, FF, FF, FF, 83, 7D, 08, 00, 74, 05, E8, F7, 58, 00, 00, DB...
 
[+]

Entropy:
6.1435

Code size:
59 KB (60,416 bytes)

Remove setup_hp.exe - Powered by Reason Core Security