Reason Labs

windowsandroid-4-0-3-en-win.ex.exe

WindowsAndroid

SocketeQ, Inc.

The application windowsandroid-4-0-3-en-win.ex.exe, “WindowsAndroid Setup ” has been detected as PUP.InstallCore.CSH. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
SocketeQ, Inc.

Product:
WindowsAndroid

Description:
WindowsAndroid Setup

MD5:
357338459a6c24008da6c68564907f4a

SHA-1:
374cc2be9ae3e3bbd248fdbc3c058352699bd753

SHA-256:
80ec51cbb4d8ac2a91a555d6e97ab47f4e06022df2296c341f5c92b1abde5d61

Detection:
PUP.InstallCore.CSH

Risk:
Low

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include browser extensions and various toolbars or other offers.

Analysis date:
10/19/2018 3:50:35 AM UTC  (today)

File size:
182.3 KB (186,720 bytes)

Product version:
4.0.3

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\roaming\idm\dwnldata\mitzamar\windowsandroid-4-0-3-en-win.ex_575\windowsandroid-4-0-3-en-win.ex.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Characteristics:
0x33167

Code size:
37 KB (37,888 bytes)

There are numerous known versions of windowsandroid-4-0-3-en-win.ex.exe by SocketeQ, Inc. .

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (759771988a1454685c88f5b6df3cf13980b875e4)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (8dd0a5a2e6d6c156ab993910b31e6bc5f843b3e2)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (674d61af209b035568575b8b78bc18f8ffe837bd)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (0ed0e9ba2a1cfaa0723918a1b23e7189e56f1e31)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (f7bfa04b3b4205f3228e301a133e072417f3ecb9)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (f1cdfcec3117ed7841734d4289e096bcd4973b32)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (fc268fbb536e5626b5fc2c071ef9b5811302e00b)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (a4a2ff4605fd6252d1320069e18842130d95ae7d)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (913e19764d20763b173e5beae24ba8853208e1b0)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (8d667f81c22e55a6fe989791edc5c986d1c90f7c)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (53053c6eb36d0ba03b902e02e0de08b1c9451b85)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (6d2f1fb9beec45791eb57a115ae1e57580f0dd08)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (cadd0361d1919e098d7b71455e5b979c54584145)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (92f55e50d9e3e11925089dcaba54a83a8d3043e2)

PUP.InstallCore.CSH
windowsandroid-4-0-3-en-win.ex.exe  4.0.3   (60418bc708cdca0a22c8b522fb80b1bd8a223232)

Clean
windowsandroid_earlyrelease.exe  (82344ed645641a5df2130f82f5a6995419ae4b9b)

Clean
windows android 4.0.exe  (fe51615f10c403c7d68da7ac56e7582afa2da78d)

Clean
230254-670944-windowsandroid.exe  (ce48ec5e838c29a06bd785128118eb1417c22c0f)

Clean
69263_stp.exe  (20345567bad7cc1276f7a67b8724b0a2ee6cec26)

Clean
7960019_stp.exe  (d0231a2903d0dd2b95ac60595b7e178b08697b28)

Clean
8002902_stp.exe  (fcafd574c6a7ef49bddb3152ca478feae0e100a2)

Clean
copy_com  (199a57708a5fd75056c7430a2baa4537f65ba498)

Clean
windowsandroid_earlyrelease.ex.exe  (12163ac572b7be7343ca303f8e8355668a49ce69)

Clean
windowsandroid-4-0-3-en-win.exe  (b29629eef6888aec3b061148a186c1a2600d222e)

Clean
windowsandroid-4-0-3-en-win.exe  (fe18d79b3b8ad9f582e927b0c3d03867da40a3db)

Clean
windowsandroid-4-0-3-en-win.exe  (ef8b3d9c09533a2d32580571c7bc2fae23a770e1)

Download Reason Core Security - Powerful anti-malware software