home

ati_omega_xp2k_48442.exe

Setup Factory 7.0 Runtime

The program is a setup application that uses the Setup Factory installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Product:
Setup Factory 7.0 Runtime

Description:
Setup Application

Version:
7.0.6.1

MD5:
21221284b2b02d7920cf940754dfbc74

SHA-1:
fd92f5d71597aba2db37f926a8d52607c32a4fad

SHA-256:
8091bd998666f0e73fbc44a1165c214d91d35f66c7ce8164af8b4249c7642c9d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:54:38 AM UTC  (today)

File size:
18 MB (18,849,057 bytes)

Product version:
7.0.6.1

Copyright:
Setup Engine Copyright © 2004-2006 Indigo Rose Corporation

Trademarks:
Setup Factory is a trademark of Indigo Rose Corporation.

Original file name:
suf70_launch.exe

File type:
Executable application (Win32 EXE)

Installer:
Setup Factory

File PE Metadata
Compilation timestamp:
1/30/2007 5:17:00 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:eyRC/Rm/YZ73hpwoeXlgFoFxL5wXzf/UXKjbTR4e2Y:eyQRPZ7rwYoFxdwDfsK92Y

Entry address:
0x1E64

Entry point:
55, 8B, EC, 6A, FF, 68, 78, 61, 40, 00, 68, 94, 31, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 78, 60, 40, 00, 33, D2, 8A, D4, 89, 15, 4C, 9C, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 48, 9C, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 44, 9C, 40, 00, C1, E8, 10, A3, 40, 9C, 40, 00, 6A, 01, E8, 07, 03, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 77, 1B, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9951

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
20 KB (20,480 bytes)

The file ati_omega_xp2k_48442.exe has been seen being distributed by the following 11 URLs.

http://gsf-cf.softonic.com/fd9/2f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=42572&instance=softonic_es&type=PROGRAM&Expires=1461813663&Signature=CaMoDwASXDB-YftvlHOoOBfSINrWg6wWJIdtfNkLyJ~ht8m9GaTItzPSTxySlGKlw561thX3bF-vFExmy~c18VEPiNtAEFC4APh9lc7oE1GIfqkRMsBPtNLWcuX5zfQKHo--mPk0vui-dG0sc7bkGDO8xTNs~gM95xTOOK4EhBY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ati_omega_xp2k_48442.exe

http://downloads.guru3d.com/downloadget.php?id=1817&file=4&evp=25e2be321c7a310aa73dcd6a8d021961

http://dlgbit.winfuture.de/fd0b62f44e43904688d45276d7a0f4dc/57b8bd1e/Treiber/ATI/.../ati_omega_xp2k_48442.exe

http://gsf-cf.softonic.com/fd9/2f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=42572&instance=softonic_es&type=PROGRAM&Expires=1459660705&Signature=WCY-7XPIG0JPfQtu8KCzHxahDKSZmG9su0yHaEu7QgUrS7sbyY7~rIaqN8MirOlzb18h97MCD8QMiyMgGZm2685SH40xYGcZRCAlDcHA8njuzd93JDRehVWSWVAM2l~fEJW0NYElAmOnAUJSrkT7yeDBAL2v3x3ZazamW-05gQQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ati_omega_xp2k_48442.exe

http://pliki.pobieralnia.pl/.../ati_omega_xp2k_48442(pobieralnia.pl).exe

http://download.instalki.org/programy/Sterowniki/Karty_Graficzne/.../ati_omega_xp2k_48442_www.INSTALKI.pl.exe

http://gsf-cf.softonic.com/fd9/2f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=42572&instance=softonic_pl&type=PROGRAM&Expires=1438650883&Signature=Vd-1HYPqm1QPDu~Mx-9diDvf6A~oKmsLbRflH4E8-gmiWFRztutDlpT25FMPZKEho8~UYRpzbU-HY~j7~4mbkeU5w3JGDlY3NcH0GlcVN81EbN101R0ijESndeCRz27qDWnXn~6kkycgvn3Cvv88ZumRXN8ulTPWQmShGWq~nDE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ati_omega_xp2k_48442.exe

http://files.ngohq.com/omega/.../ati_omega_xp2k_48442.exe

http://gsf-cf.softonic.com/fd9/2f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=42572&instance=softonic_de&type=PROGRAM&Expires=1432868427&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=PFwnDC9dW2Bfz7CDIXCkCRusjBCESBpqolOoSHunwqaPD-9paD15VysRlH~~HRDs~52vHBOTo9bPhdaex6~rPN2rv8n041d4yribosDge9zf7RNubuy6wcy81R69HQJsSQ2euMlimuGeTK5nc4aj7r8PBQZx45Cn8M354xnXadw_&filename=ati_omega_xp2k_48442.exe

http://omegadrivers.net/index.php?option=com_phocadownload&view=file&id=1:radeon-omega-drivers-4.8.442&Itemid=65

http://www.omegadrivers.net/index.php?option=com_phocadownload&view=file&id=1:radeon-omega-drivers-4.8.442&Itemid=65

Scan ati_omega_xp2k_48442.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.