home

antifreezesetup.exe

Resplendence Software Projects Sp.

The program is a setup application that uses the Inno Setup installer. This is installed with AntiFreeze 1.01. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Resplendence Software Projects Sp.

Description:
AntiFreeze Setup

MD5:
25b7a2bf69382e41791ba9103f49e11c

SHA-1:
487e4de07878d97b285d2f5fc647467b02892b6a

SHA-256:
28f3d4d2098a87579268669974071f5050efa48dc1e7aa505e758999d5f713ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:20:26 PM UTC  (today)

File size:
814 KB (833,539 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:Z2UBU+4S7+qKfP4MEV3GDSCt+cFWU8NJ3sBWnXr+WNNynWD6Yy:Z2UayECVUhFkJqOMM6r

Entry address:
0x9A54

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 72, 96, FF, FF, E8, 79, A8, FF, FF, E8, A4, CA, FF, FF, E8, EB, CA, FF, FF, E8, 12, F3, FF, FF, E8, 79, F4, FF, FF, 33, C0, 55, 68, 02, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, CB, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 06, FA, FF, FF, 8D, 55, F0, 33, C0, E8, B0, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 23, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9746  (probably packed)

Code size:
36.5 KB (37,376 bytes)

The file antifreezesetup.exe has been discovered within the following program.

AntiFreeze 1.01  by Resplendence Software Projects Sp.
Publisher's description - “AntiFreeze offers a last recourse when you find your computer in a hung state. Because programs consume too much CPU or too much memory or too many programs have been started, your computer has become unresponsive.”
www.resplendence.com/antifreeze
8% remove it
 
Powered by Should I Remove It?

The file antifreezesetup.exe has been seen being distributed by the following 11 URLs.

http://gsf-cf.softonic.com/487/e4d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66839&instance=softonic_en&type=PROGRAM&Expires=1445028371&Signature=OwiFmVX10YJkH3wN-3JVu9ePqJ4fA1ygI0kc7di1fFb90Fu-NQhl8eyCCdvg5p1N~-WO-dTovIM5RpajpXLcLvQzjIkKNEALb1fQM-Qjub9RfOAbYrEtJwP7F5RHxUKSZRHXlmGL~G3x7YnwvOhO-DBhzfMPlc1gMA2OicYkqIA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiFreezeSetup-1.01.exe

http://gsf-cf.softonic.com/487/e4d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66839&instance=softonic_es&type=PROGRAM&Expires=1477627830&Signature=OYD61jsdB34l0ylgKRGug34zlidN3HycJCF85VQcfUN8kaedtIdS2HL46ecXNsZEJt7Cfrb4EF95fgyrzG9Bd8vEfxU5SoRzRclNSuESOLabh-OdXTWVS0i5sj5~mSCpNnjvD65MRWfoIDZk2UBGhyP0Cvje~LxYT4qryPdYUyY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiFreezeSetup-1.01.exe

http://gsf-cf.softonic.com/487/e4d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66839&instance=softonic_es&type=PROGRAM&Expires=1474694128&Signature=IIEgU~KXu7gtOY3uaBDLMSY4b8F2YhTrKWxiu5cELNl3EVH-9v3CT37U~nmd~kWuEVf~nUl6UHy2KJKdP9GJo3dvwAswUHHMwTm5sfK6lb4Qg7kKjVLKhj2V8Xt6l0vfuVwnEvpejOrm5Aij~LXylT7kRSTujskOfsSr3ttkVEc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiFreezeSetup-1.01.exe

http://gsf-cf.softonic.com/487/e4d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66839&instance=softonic_en&type=PROGRAM&Expires=1471012578&Signature=ZOBx~JQnMHhyz3gk4O-~TGT2koafJ2LSS57k1FjOXu2TLvd7r28fAE8Kur5Oecq-L7e8KLq79lekP4eu12Kp4CO4tQio2t~-EJZqqZALUtmSjLJb9y5pd4VwtXTDdhG3CHD5oEmHIlDXeqNovA5daZkKkr7104cZ5e20GUgGBnQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiFreezeSetup-1.01.exe

http://files.downloadnow.com/s/software/48/04/.../antiFreezeSetup.exe

http://gsf-cf.softonic.com/487/e4d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66839&instance=softonic_es&type=PROGRAM&Expires=1453440814&Signature=Bh2don4Njv8LgF~jpSAKtiLn7cP59Ks5kbO490w276joH9s8-UJChh6ViON9ye2WoYE~PaJInsHMNOE45JfUIV~JueKdbR0UjXner28YutnTBj90-K87QAMfj6MAi47WvrknS4~VrbrnnTYXT8Xs39nNsp0EJvtkq56w2zutEEI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=antiFreezeSetup-1.01.exe

http://gsf-cf.softonic.com/487/e4d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66839&instance=softonic_es&type=PROGRAM&Expires=1433282544&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=TRYbs~XhmeYrULlJVNfu3SWWMnWkSTdZXTOvhM4ilrpsSCCLxKgOHPeV35Fk8oiVMRJeDyuYGSumglKaSuEm6f~XCQL4tPxCK0Mtjec6lstFwPLGLd79iv2LIc7qOXcuC7OVy7n208culosXBmqmKzK4-qPU6WWblGefdqALLNo_&filename=antiFreezeSetup-1.01.exe

http://lb.cdn.m6web.fr/d/c/a/ad0a8b01e625d71d3b3a02962b0c2719/55f2856e/soft/.../antifreeze_1-01_en_181456.exe

http://gsf-cf.softonic.com/487/e4d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66839&instance=softonic_it&type=PROGRAM&Expires=1432345025&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=RpbzwiJtLipGi63h3koS-ycXCAUGAyupP7O-VvhNgtIRtCyywwGh0lE4jPFQtAaoIl-SWxv0VhhzfLJFjFAQ7xUZN5KUqsnXRdHsBW1OGMNaAeibQx6e4bQCrizgiTM4h~5bdHEKbKJM12s3pxHEDRloVofDqtrQkf-HA3ZZ8Pk_&filename=antiFreezeSetup-1.01.exe

http://dl.cdn.chip.de/downloads/.../antiFreezeSetup.exe

http://www.resplendence.com/.../antiFreezeSetup.exe

Scan antifreezesetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.