home

1.00.0_installer.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
550ffedb1ffb0763bbfa39c2205f7f1c

SHA-1:
cf6584fe50503cdb21730807ae013b5ca07649c1

SHA-256:
f39cd459a727e48411baf1758bd512ec27c21b3976cd69cd11fbc2bec92ccaf2

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 4:51:05 AM UTC  (today)

Scan engine
Detection
Engine version

SUPERAntiSpyware
Trojan.Agent/Gen-Yakes
10371

File size:
507 KB (519,139 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\1.00.0_installer.exe

File PE Metadata
Compilation timestamp:
12/6/2009 5:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:cB/BB/+IDHiEYY7M2yIHv02WZZKybHCEzftNlk/B1/:SbiEfV1Hv0KyVzftNC/r/

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file 1.00.0_installer.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1481604289&Signature=H9tUW5EKuMYMH87YUDBPFPy5QW~3S~rwuxXuVgD~u0y78RTDcY0EPd7i395cVFj7dKAfrVJKRMcN~CPdmtAiznyUsm9CU0UBfGh~mWzaeSpgnHo8f1wlaC8KWI5Ol1MsPYKgfplNgZaAg6q7lURcZp0TBeWP4kTJOM65FlHu2Q4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_it&type=PROGRAM&Expires=1485472604&Signature=c6w1YF~yRXM9DhQaoPdrlZMCVQlGoPlw-9ygCN0PoqqjqRdAduJ1gHYqpGuSb32RTy8aapEqaBLSCSjPHrPEajbR5obIsy3z-L93V4bP9pvOs3Dd4IyqFd3Ar8g8rQGQBJoe0K8AS9rrumFC9xe7Aim0t4GWKftc2akKJUUwG-c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://jaist.dl.sourceforge.net/project/mudownloader/mudownloader/.../1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_fr&type=PROGRAM&Expires=1482325476&Signature=OjQiyOiE3gx30Htc8YRe9QyuaVlPQYuKeaRsb4pqLfqpVrSfles84XLwYzLOShZLFlIOW0ixFzjA5jWHUXuT8cwAEi6O5znQGGTyURd4XRd9Zu6JMXuGYM9Pj00EEHLf0oSivFT5dlcJM9aZGLCcU1xRm-wu-fxjWOBl5ztlS5w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_fr&type=PROGRAM&Expires=1486549004&Signature=XarX~u5uITrdjPQw5pIHvSPHwAwzZ~LAxqgx7G5qS3B0LdxlajJQ89-5YlvYWNQNmm2mI5lY01-DGBNsQ5QsQSxbU3OSfiOnTZQKKdYGHg1R0STRDLwS2z~EIDGKYsT3~IzYkqGvZevwvrZ3TrSqXXuTNVRkXrmN~pazYZmrFec_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1479169175&Signature=bOJvXvuonYj31RwQITmoOmtsyuPBjH8a-bmPhYcyfzGf9LaMX4vRIryofEsGGARVf41VphLzVUTEenWlMNOO1rsvFT-dpW7gz-WnWp9tgf-d4fh7DAFZaYdVEtVBW9SIEI6TlZtrY3gINwTCm6bfZj4xQQ9ecbxuDMXmSCuoKsE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_br&type=PROGRAM&Expires=1477038013&Signature=NJy5E8ecmlf9lbxVHWLv~HKbzpbTZMZAPSyyRoadwGM0h7TLlK-jzpXRCOCgB0pU1dxrDu~ezAiTx6RHXw6ETs5BtUy0gHodqn6-dw9USwOmXrZ5~n6Mhh5vgWRGyBR1WwJD48PPe6mATdJEgIBBlRaSeQR2AsapGjo1OtUdg1Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1480207477&Signature=DRM3iyw-V2CDJM2X6MlmTE~WexMMQuESKZ72uimas1WuRfjm2YwrnWP5nuep42m4IcKmWXJ2NxCUNRqVX8u5rsdDvD-OyuQewgprn3NQtjCXF0Hx4sNA7WKiJWXJSwGEJhJdR3x2Q6Lp0vTys~goCjXfti~v1u9Pb1bfVRqdqsU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

https://downloads.sourceforge.net/project/mudownloader/mudownloader/.../1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1484957509&Signature=al~nGK4eZLAggb0zt7k2QmHQSOf7X5~YFWvCCxihHFJkMlV0sWZccRx0dPif0LSRiOuuQV3wyQpbmMvYzPBioKLfO6sbMRMues57LOTyJWbN4jowBKZe8pw1YYBASkWknQTDRQ9cqJVvo91NxLwz3Ug~IWJWDlis5RqlmvP0oLI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1487047082&Signature=VdvAdB0NYslBGPcP0kpuPGBrK~IgUpMm14WQC9qb8wDDDsqLhNfJMt~U~NnpPJ1C6735q8-l4O-5XNCaQpbLltwlokVYfPB3dxUlg8I-qD7N8elsZsVdSzUd1soLNn4-wnwrrLP~AA0WgsSMnQKCSQ4dVU6fkze8VS8VFjMnfaw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_br&type=PROGRAM&Expires=1483533460&Signature=S4IFVC2sQ3ri~dRTV~BJSJNZRKgvliQxDi1CbpymsH2DPiyuuFzFHgykVHAC2h-8bLRuWoZhdV2PTUMYthbwpfsHJDfdgYpTJuhJPjQxCZHdnMOw5pjZogWOVjrT2zh0wY7cfI9Zg5au2~qKsko3ka~S3ewZq9UV0xiYKU8bLTU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1450413814&Signature=cDvur-9eVX6qZGtJPXYgaNSe2n6z2aUqUAJdCFg4MWjSpLUIXO0x8GetfubPAq1KKWHOVIulLwqxh2WgZSxCqBKBCKYxGcH9QU2qN0NcL0KsWcavC9kw1XdGbwY-ZY0iOkc~HbCQ0cl0IJIvhZLauypDcH42d0xbQnl9gMhBAGU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

https://kent.dl.sourceforge.net/project/mudownloader/mudownloader/.../1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1482997565&Signature=gkvnsTY6G4h12ikSjA-93eeq89oYbUyBtlaDMRFGUYGdfyxXOa1xoKsjNiohxdrSIJM~5sc45dH0-hNBLfjYal9CjC8wnot-8axUGVJ-qsYYPpjhqIRaDw96ibfC~rvsDNjzve5w0KmwDSJVCOpdKMPXXE4L6qWBqbW79nqO5R8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1479485587&Signature=UFE~NiioHilhA0RYO8N5oIh7doUYVZLv9TmtAtcuWGIONMnGAb0EOHpke~NfnK8f23lMLB1a-uLIA~6tSkKwfpiatgFSB3H3wKALxgLJPZ432qu4LKG3fcN7jVTWUozZZucEL0hwSppGPQQ2dCsojiH4zp8UrIwes0WMs~n1dM0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1453587754&Signature=LgFn8Z3c11QCZCG8DvO~fJBgLOiwx8l-sPKf16oxTyDUUnnzqARzb~dmwW4P64OLCfcnfHtW2Ldq18SmNtcrzi7Yte1Ouyy~SwSOCG92pGr6ZIV~WePVDilB1SGQSAvD7zNf4EPM6~DmJWsnYVw34IANUMZCJ0MAsPQbmEsZmBw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1477405892&Signature=bqhZGdniVmO8yud18GXvZMRJIALyDEOe7BmVlGLU4Z4wbqDdVpZthoLdGp9sj4AMmOZ-I7URXAq01T4af4RtQo3016EKWYAIe0mLMAtd40IbNQqJ1bWBYytEz5jjI4Gftqq8qjJXBKQz9vdyVPzGk9yg4K1FFDtOfeDcSc4d06o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_br&type=PROGRAM&Expires=1433504208&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YecIDsrF8WQ-K4RJMZ8J1AWypD3dkkGhmGXyo2WYNzhIsJMmSlMLXN0kBqgKdllhzxS-lANlKU~7L6gzif5ZQeDVbHmKLuT54eNaEBLqzaQ7cH3hFeGFilOi0oklEOu5KJGuNPG9dD5hKZRy0n-tw-tsSAribPWW7qEAUIaDTnw_&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1478249934&Signature=OMrhPIZppnYzSLXSMRvfgEARBJkgunuHKjLpQKjsAEsL0eW8k8x9uB3dNijXTT5jYsArsitpTOiCs6yyKYjf3qqY06nMLANfNEAwRQg~bg60d6Pqdp5~Ys8qvh6uoG447kELT~T2hMkath1VZ65NvRNvctUCsmbRqFJoEynlaH4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1480422596&Signature=BrVHYzvOYINUUAvHwT2PlLd1f3fHgakErj16WPDkmNjWEXGuGz-7ThkCl7s0zPFgM137XtI4veIHsOLEcXvx2nUvG5gsJhLsSADodSulfXDypdJoranyGRdpFy8cfvemll7tSau5uPCvw-tjfa-Ho2c5LWMpPmDMLtTHdtCqrKw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1466837047&Signature=e1IDM2NpDz-VHai5Q~bq9Uboqzj0lino1uG8VtE1QzQq8qfC6qULSfJWaT7PPKrzlBKG534RzkV0tc83-Yqix2YV-vT4ZD1tkBQ1K9ArIaD1pIiGNJSXeDIh-jbem0bC3d3BExmTP7RIel7tVqhX3A1vBxpHnhDZgUXSxXWLdl0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1473682080&Signature=akGGhQUUP97FoBvIS9Ct2nfPIzfYTH5kJbBsWug1pHMAeiwr3CKn~XzzEmtHOAh~LxJrYIWTb43AVBHkHJfz0HCDj6yc74bGCPg9C4644-7Cdh1ZZBI8lVZbjvFBMLwNslIlAzEai8m00jzMDOQgHJmBrmTgNna-5~WjEEXvdZw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_br&type=PROGRAM&Expires=1483144219&Signature=EWePrrQMimVuh3sW7gf3LRa4Qc-6pwbPmQ9VzJlXo2tnQpUMeL5hIGoJUOZ6x653wTM4j112nTLzBJUSGGhTROIlTd2f8aOHkyiIZoWmjvQCbhdmdL2BwLL8pAtgZMJPIHUPITUw8RWSs9CGgye1zcpFuNveta~Y6BOeYide5qg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_br&type=PROGRAM&Expires=1482106219&Signature=ixGlMVgNHI2-H6sSJbm3rV9YdoQH4akOE7tXHDxowYZF6qGOOZbWBHh9cefpTzJWg8F2jDNrP49ihiBX~JjRxuXpZp5kAvmCEf-F9B~1VYDbULSiAuvCYGSrl7aOU8a5jsTmn2Htgm8G09-eIWLFwpVG8QU1-Kz0xokmFYfYBzY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1462715488&Signature=DVWYV0JG29CTvOH2pT8uushKAN3nOTUiDhzbiEEilq87OWpww2ZZpISFf19DviBUt5hih2lmGIBON67CGu97sPGN0ddHWib2kBeecopMeqUWXce3vlDguvLSN9Ngt3RxeR-m51FRyoG9UGvJ-Qfk-fPGi~N-vUQUap~jPa1Nj00_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_br&type=PROGRAM&Expires=1445651290&Signature=CReGnOTuNm-9Uq-YnoiP2kaRAu~uT3tsQBgu6GDMdppd38EJ8e25AWuNDTsC3F0CirXENDHK-sy70OmAUlQakAG4Oo0-3s6vsvaMruTFFUo5J~kDQWkZhquebsRKCkvF7YJOtLt6b2S~W6SEmwpZBCvEBwQB8Q1u5hIt3ytmOxw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

http://megaupload-downloader.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPJuuM5I3KISU3UPMYypoWV JXLL2TiXlCLg5bM0v6R/Wa5ItgZd9LuLyAmyQR8/4yckT4Xww5VHsHWx6Qep qRGYbiBboBWtAXdM nQdIuqk0uZuppVYqBigNfJgkR2X E6aiIAqlB5vNRuz95bRXW31 XNXURITtiiyVToMaK939KkOPMYjniRBFd7iSg1bkxMvlM2Rjjp0VTPcguoSHaDLzlG/FCyzfqJLRk L6W47Ae110YqknqQyIIKE3QbQeS07229yP9DmbSOofyBqDRbBFacF7m8qLh Aw5AoBUwW8LZMl2J9rptkW4rwf9ZhXpPyO8cE9zwHMhrXm82jjYm3CX7/H30gbRaIEv6JYv67XXKC3VPcyOH9VF2/5s0RjAxYYAt9mWTEVf8PXQPaHYC3I69Dc P6esO3gnKqulvT4S/Qi25Am5J0WMRRY0hMdTH3 Ip8xdi p4nmww/QmFFhW2mEvaB6mdsXr4OBJAITTRqmMEXEsxWhbIDS/.../N2mAUdvkArElE7y31YHNOsQQu RUd4py2eQdMPk2V3cUhcu0TDJEiFOoKeaUXw=

http://gsf-cf.softonic.com/cf6/584/.../file?SD_used=0&channel=WEB&fdh=no&id_file=96975&instance=softonic_es&type=PROGRAM&Expires=1483093680&Signature=Myj5a05oVmMo6244xjvoG1gfd4wkj3O2rfOy1qF~~KTEaQ5WviLb~xLivn7xCuIqN5HXGBdD9sySBzJbPvnNYvHL8ErohPcNJ1GjMEJMcwc~xMJJ2KJa9-oYDalWjrErDRRVPiVhbCLjgcSspfCnskbh9r47Gi26rkpbmZoRSj8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=1.00.0_Installer.exe

https://freefr.dl.sourceforge.net/project/mudownloader/mudownloader/.../1.00.0_Installer.exe

Latest 30 of 174 download URLs

Scan 1.00.0_installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.