home

65488221_setup.exe

Softdiv Software Sdn Bhd

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Softdiv Software Sdn Bhd  (signed and verified)

Description:
Recordzilla Setup

MD5:
1ea095b63d61a572832d4d92fa8ebc07

SHA-1:
7525718a0e2aa53832cb2d1c0a9acc5a770d4991

SHA-256:
d39e2faab114b1932a41a0fe106ab971e3f80c948e4c80a01b407ea92b529789

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/7/2024 5:50:23 PM UTC  (today)

File size:
15.2 MB (15,918,472 bytes)

Copyright:
Copyright (C) 2001-2013 Softdiv Software Sdn Bhd

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\65488221_setup.exe

Digital Signature
Signed by:
Softdiv Software Sdn Bhd

Authority:
COMODO CA Limited

Valid from:
4/27/2012 2:00:00 AM

Valid to:
4/28/2015 1:59:59 AM

Subject:
CN=Softdiv Software Sdn Bhd, O=Softdiv Software Sdn Bhd, STREET="216, Jalan Permai, Taman Bukit Gambier", L=Gelugor, S=Penang, PostalCode=11700, C=MY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F03E9379E3F54F282A0F13B286BEC9B5

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:lFQaCgHuCuxqMVy5wqZ3S/qYE3mlmsQRgYdp8kWX9RidGaplfpRRX5:74yX5Y82wsFj3EHfd5

Entry address:
0x98D8

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, EE, 97, FF, FF, E8, F5, A9, FF, FF, E8, 20, CC, FF, FF, E8, 67, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 82, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 38, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 9F, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Code size:
36 KB (36,864 bytes)

The file 65488221_setup.exe has been seen being distributed by the following 8 URLs.

http://gsf-cf.softonic.com/752/571/.../file?SD_used=0&channel=WEB&fdh=no&id_file=328448&instance=softonic_en&type=PROGRAM&Expires=1476524424&Signature=g2jHRZJx0otnOLawOpRLCBAK2lZwc6xtiAwFP5lQ1yaRRg1X8fVDyYzo6xpILh8f~fdskh8hVtAR~BAEhpzs9xMSYCo7PuKdYq~p1ockOULddTEzsgxnCkzOGugSpMZATC5yI~gKMEUmFy05JopWSFoWATkf45MhMB783I2yyKg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=recordzilla.exe

http://software-files-a.cnet.com/s/software/13/43/41/.../recordzilla.exe

http://recordzilla.en.softonic.com/download

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=3c0f9f7aa30b9b21ecff2824c14e8661&upv=38d7a1f06e1c6b79b054a1ddff0929cf&z=pp_warning&sk=700&abp=0&params=F39B2A32BFC101987B1458170C278E033845CBE4BCAD2B77BC00D22160E2478716D3D4B7E9D351FED67B55CF010A66A6C6A9F0237CEB3CD0FA375DC6613585674EB4C0D31FF42A7225EA54CA86BBAF645E21A512A12E8D3022085C25B89CE8D7F6B76B827FA57D836F13A43F091B4E9912525E5A7408F1E10B88B9B5C22C4A46088B33E3CCF9B0C2AABF6BB369A25700ECE4B409D542189B639E79550A6AA390&h=E66127F0534571B4B2D5C610CC7D23777FDE0AB6F0C8F0DC35810230B9C2EB61&directdownload=1&f=328448&d=http://.../recordzilla.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=2cd536be2f6cc0823d8454edccc86ed7&upv=10664e2f6eaa242afda57a530ed186dc&z=pp_warning&sk=700&abp=0&params=F39B2A32BFC101987B1458170C278E033845CBE4BCAD2B77BC00D22160E2478716D3D4B7E9D351FED67B55CF010A66A6C6A9F0237CEB3CD0FA375DC6613585677B20FCC101F5B02609F0E667731CFC3C13F9867B15F477E270213FE508D69AC40CAE65F0B69CADAEFF2A4A6FC1D563D698B509BC15875B511A4BAEC84EB7E1684F77C6F147DDA51912656C245C3798605B8AD25F878C0C1D727EE4DF392F7CBA&h=CF8819040CEAB3B9357AD91E67F551971A44756D2F0F2E54BD97EC2983B013D0&directdownload=1&f=328448&d=http://.../recordzilla.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=GB&sid=358b0b33ae909892dd75136887fe375f&upv=bc50ec1430fe0f55efd20eb15ec53dff&z=pp_warning&sk=700&abp=0&params=F39B2A32BFC101987B1458170C278E033845CBE4BCAD2B77BC00D22160E2478716D3D4B7E9D351FED67B55CF010A66A6C6A9F0237CEB3CD0FA375DC6613585677B20FCC101F5B02609F0E667731CFC3CA6F62527C15877AF713248F252F54A5F9114444B14CCBCB8F2FCED18D3DC43E88E41BE42E488FDFD48571446267D8ED4AE377D5D01ED76E1348C2F17D065B342E85EDE04D36106B7E949B92EEC1CA71E&h=29C791BB5E97A19561A36CF3E2E072585B4DD1B7537E467BB090E2D6E6FF1827&directdownload=1&f=328448&d=http://.../recordzilla.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=CA&upv=e5f121f9364c3a7158eec9c37dd9d980&z=pp_warning&sk=700&abp=0&params=F39B2A32BFC101987B1458170C278E033845CBE4BCAD2B77BC00D22160E2478716D3D4B7E9D351FED67B55CF010A66A6C6A9F0237CEB3CD0FA375DC6613585677B20FCC101F5B02609F0E667731CFC3C96FD0B7F325A63488DA77D6A4A19911E0C1EDEFA66525C7E430C4573DAB32BD6AB3D5484EB45D1006376ACEC40D7A3A25FAF5F27471F4BFA5F1C4FF539D9392DDBAD4C7DB371AA968CCCEF5A21B4BE4A&h=E1136AF2FDB41F4F87F277C5F0068A2974190459DA14E95693A38866A1839E76&directdownload=1&f=328448&d=http://.../recordzilla.exe

http://netdna.recordzilla.com/recordzilla.exe

Scan 65488221_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.