batterybarsetup-3.6.1.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
bf2f65189f6ee1ed152c02a257785344

SHA-1:
8f28c20338414f352f54d6a1141a26ef3673acef

SHA-256:
92be6ddff6e98e06382bb6a77a8233ae2cc23cad86699f50618266d842dfd189

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:13:53 AM UTC  (today)

File size:
1.2 MB (1,293,522 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\batterybarsetup-3.6.1.exe

File PE Metadata
Compilation timestamp:
2/24/2012 8:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:XDFgOEIt7jmDNxR5DAQdooLjomjI4UTASH/QI:zFgunaxTDL6OjzjLAn

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file batterybarsetup-3.6.1.exe has been discovered within the following program.

BatteryBar (remove only)  by Osiris Development
Publisher's description - “BatteryBar is a lightweight, powerful battery meter. It monitors your battery over time to calculate accurate estimates. Adjust the battery meter's look and feel with comprehensive display preferences and custom themes.”
batterybarpro.com
About 2% of users remove it
 
Powered by Should I Remove It?

The file batterybarsetup-3.6.1.exe has been seen being distributed by the following 12 URLs.

http://gsf-cf.softonic.com/8f2/8c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=75742&instance=softonic_es&type=PROGRAM&Expires=1422348204&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=cE5RlYZABRHKtiP4eQNKLkb6RF1Ej7mW8jZwHWUFt7yiYi0wW6tw0TEjRCKZGTNPXOIwwLVlSMOkUThT0UbsB4PWLtr6QEkmCgeQ2jE6BSqo64Wztmk0F30hxGrXn52oOOT0fHj2wAlmXNOoFDHCQvbSxoDR0-Ucilgn15mSzfk_&filename=BatteryBarSetup-3-6-1.exe

http://gsf-cf.softonic.com/8f2/8c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=75742&instance=softonic_es&type=PROGRAM&Expires=1478079454&Signature=JYCb8fXCgwl61UdQIk0gUbLgij6ATFynJ0q4PkbUsLgIsb2nXYCHnCfA8-qF9paL1Ucks24tLv9EVV1tJ~tPt6wtG9RSLFkXm7BSMSsJqEgWI6dio85bIkVFXtERpmU8Gi2Cm8NBeBk1TjLmcsTRCx1UkZcZjwE5ke07uRPs6kw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BatteryBarSetup-3-6-1.exe

http://gsf-cf.softonic.com/8f2/8c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=75742&instance=softonic_es&type=PROGRAM&Expires=1473058738&Signature=ddkREqhKEQJUMVUpEwQ4v5giezwjCPAuJnzWONUFMbCS6ZPtbrKno23f66abTawX7jRcMaLtqLJbDcZs-GO5b5AqlRYsy0xw8lg2KXjbTt2Ira5N60~UIpPypH1Yxl00-wMnq7RVqbJLuKR-MAjYSZAPP2r0yM0HwN4il8Yq8dE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BatteryBarSetup-3-6-1.exe

http://gsf-cf.softonic.com/8f2/8c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=75742&instance=softonic_pl&type=PROGRAM&Expires=1450072390&Signature=dejeYQ1Plb62A8L0nGtnEOJu0lxKcxSYIVxa-ocXwT29w5dmQ9SQHGjSa3aHV2jrd4lYA9a7vAz~PomOCh7giggpGmkN98Jppv7AGdSZHCCCrIlV6QqdizXNrt6Rc9bc4HWSosE-aIqU6Sw8OS9uTgp3dGnGSVz3ro7bkNbIprk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BatteryBarSetup-3-6-1.exe

http://gsf-cf.softonic.com/8f2/8c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=75742&instance=softonic_en&type=PROGRAM&Expires=1457319713&Signature=MQLFLfXEYnzgMx9GSX7ByaU9YiW~YawkRrJf0~YU-97sYfN-LFBXNKFnbZjQsFVKmNOL2Da9m6KgQ16~5cWpSfaPYANbK-uXdwAXGgFBA0Zvovi2hvg--sKzsluNn1cw7cf76r1NrT6MINEI680KoND-BDjoBB-h5j0ScYzN2Io_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BatteryBarSetup-3-6-1.exe

http://gsf-cf.softonic.com/8f2/8c2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=75742&instance=softonic_es&type=PROGRAM&Expires=1475331402&Signature=RwaIuCj2F0~G-SQsh-ZxEl~qiKRP7wqv9aAKSduajBv40DUl2Wk1VxzgRmgm2YPK2QbrFSlgGMFLoPGfUb4F2jr0GRZV3RYFy4AXDnhgyCiELqhqWJvOVKDQK0m-E6QJuC1bSj-etCn8~wq0qj1elND6ilJyYVOwMp4RMpPGeOg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=BatteryBarSetup-3-6-1.exe

Scan batterybarsetup-3.6.1.exe - Powered by Reason Core Security