clocx160_x64.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
727d2c497d3775d5bfc8d84be3129e49

SHA-1:
6ee67485cecf256fe956c366f6ce74c658b314f4

SHA-256:
7c7a91e9a835cfe245571bab3ace21995e658892e6ed91d17f88c4e85adf48cf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:30:10 PM UTC  (today)

File size:
20.1 MB (21,031,298 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\clocx160_x64.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:u4VPODjm5gVzPMjErSj2dIwyPk/UsbXmIXrs2KHWPjMUL8CMK:BPOHmIzfAK/zz1bsFHWPjMUAC1

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file clocx160_x64.exe has been seen being distributed by the following 37 URLs.

http://gsf-cf.softonic.com/6ee/674/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69653577&instance=softonic_en&type=PROGRAM&Expires=1483832661&Signature=Q9HaG-biYWlysVBggvktzYYU0qjHfOvlwFpMa6J-LqipsV4yhsjgDmOo4jBGSfWnRns5ajc3dmMQFuJczOgFy~S17TlaC2Uq9jdKDMRu-LxQo~FRsSKDMeMw8~K7~JJXwj3WlSCfnKWonCv8nDfrfXsthOo00-VTHbv-mbOoAkc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ClocX160_x64.exe

https://clocx-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMshvoijGePxROxVWVAJHp47W 5jUdXHmPHeIsHJ49oE5JbBfpxAe oHy8QOE67taLgppVbYsmpdAasT0F1u6mn6SMK9JL8659jietHlwWpRLq7HEcM3qv8 jrtMO0Qwe6KhY1oW1pxHBn0dC1rZ3WujIEGfeaVJqBAJUKg3mh2LSCPVNz8McAb7VFtqPaz7QIJnT r3nDXT1TcEso8v2r3O2dIelXs3XuAtwz FjP vxWMbS DEA4kD47tKS1Jw6IKvPZhSRpYjS2JuppDk3Lnq7CN61lLm66HMPguU59rxmrilZqKfEF22G6GA7M/jvqOxAfKr/JK9oMGS sMJ/aGHiEFcFuO7VB5CnQRPAiclM13WlRRXdZjFhPxZ27HElktNPhiZlm7w7XFClmPirKZj3h2L547OL49sGmyeIu6GFXY7xMPRJ4lBpcoFOpfyN3bnlXyPieWo8qL4hbQQswVmdQiDeb8Qk/Sn3b3/GgedOx6mZlS3uWkOpT/e2I4p2Il3t1 67Y69XCRliTwsF5se3SLkwB1qNjEMM6r01IMMY//.../bvjq7YWWLQjn0=

http://gsf-cf.softonic.com/6ee/674/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69653577&instance=softonic_en&type=PROGRAM&Expires=1459899229&Signature=cCtzILrUz1434h2pHBHnJv~CuiXEp3gjxaTHke7ZzcgoHr9LHkTZXa0qFynDiZ7kNSNYXnE36lLhDQgV1XcWzD7b-v4nOF2WDh-ghYSfOUBPwFKUo-xMFkOWwCfMsz42eqi3ehTryGFvqpW2boJwMV4iVTsiPueCRI~iPnhbFAk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ClocX160_x64.exe

http://gsf-cf.softonic.com/6ee/674/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69653577&instance=softonic_en&type=PROGRAM&Expires=1477720703&Signature=GBfW8eeivAZZeQMkumGAFspxPAXDB2Xk3Daw9QrP8FjXjBwK4VZ7Dv5vwrHdSzcIno8Tnze3F~NPP~fjtzIvTo443ohnJBFAk7iwTuGltDMcffTC7UYTH7eC4WlwebTTuHl-IktQ1L~V~ih9jyLefM2E5zbi0r2Lhe4bTqDi9Ts_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ClocX160_x64.exe

http://gsf-cf.softonic.com/6ee/674/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69653577&instance=softonic_en&type=PROGRAM&Expires=1477753260&Signature=ZCSbvDIMSRn5mrkSIE3-ViMyfibbMoyayjHIa4FZ1aHA-hJf6Neb8iDuiELQf2l9czHFPXoFtPdGK2DeOOdypLWa2RxNIpqZ3I7LiVsMz0vkSXVMhw6SZf6W59iXcN3H7MXzZNdY9Vx1DOWf13Kk63eCAB-gcntKfrDcskIf7wc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ClocX160_x64.exe

https://clocx-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMshvoijGePxROxVWVAJHp47W 5jUdXHmPHeIsHJ49oE5JbBfpxAe oHy8QOE67taLgppVbYsmpdAasT0F1u6mn6SMK9JL8659jietHlwWpRLq7HEcM3qv8 jrtMO0Qwe6KhY1oW1pxHBn0dC1rZ3WujIEGfeaVJqBAJUKg3mh2LSCPVNz8McAb7VFtqPaz7QIJnT r3nDXT1TcEso8v2r3O2dIelXs3XuAtwz FjP vxWMbS DEA4kD47tKS1Jw6KxFZ0 9ZFf/g9XqrkT0Y7EVPQSez9LOSZvPvRWFQW40jKlfIs5eSRLe7ab7xxsI2Lpmkv1qmPvszABWGhdDtnPHVd6XHAJX1dY9B8eMhZZstzPxkn2gxglOhNWhV1m149gMzkBBpYpmAzeNr0H0IKbUYOGq7CQhyKYLWOjb06R96suYsdeJ4HPMVGjdkW4gy938WjzLE6 CKoPKaEBKVCZmRiJ fizPNPDwZJfVEEYnr38EvEreNI2hgrAwhasLjdq8BY2oKO7wB/E1HMr7qjF8V1VkEwthyOW3mJD4PZBVI//.../bvjq7YWWLQjn0=

http://gsf-cf.softonic.com/6ee/674/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69653577&instance=softonic_en&type=PROGRAM&Expires=1452170807&Signature=hTcXLsDMBt9oknfPdnQgZPFHzscYrGjBmnUkeN~Vb7U~QhLRPT4peGoQxBI3WgXQaaw1S01j-bAtw~Ya9ibPX~fKuQconBz0cJJknPHxddx5qOOzGqWNzx6TBFdX~xAu9FPCQ8JsKKrgLt4KeSfxhaShA5Pq6wH15KJIBtArBwI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ClocX160_x64.exe

http://gsf-cf.softonic.com/6ee/674/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69653577&instance=softonic_en&type=PROGRAM&Expires=1463153361&Signature=hxqvArbGK-7F3Mlx~YPFLUGCX-HlCtX5HN6pqmDxCVRiwiXRN47aWmPwmMaJvnyqUrW7yjJRQ3PSfpi6G8Xo8pIzIlFHd9h5b4uA-8DaQWPqsqLhDijCR1LdoOkyh0RIUvJ3cSfu7J~Bu8PTNOPRLKx4BqWM16BfhtsHqTraIes_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ClocX160_x64.exe

http://dl.dropbox.com/s/.../ClocX160_x64.exe

http://clocx-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMshvoijGePxROxVWVAJHp47W 5jUdXHmPHeIsHJ49oE5JbBfpxAe oHy8QOE67taLgppVbYsmpdAasT0F1u6mn6SMK9JL8659jietHlwWpRLq7HEcM3qv8 jrtMO0Qwe6KhY1oW1pxHBn0dC1rZ3WujIEGfeaVJqBAJUKg3mh2LSCPVNz8McAb7VFtqPaz7QIJnT r3nDXT1TcEso8v2r3O2dIelXs3XuAtwz FjP vxWMbS DEA4kD47tKS1Jw6JkoFKn1i6njL9E0QfNFTqJm2ZxDU8aR4L0CKdMbQiQM rE83yN6xyPgJ9mMYT6fMOiNDe3dCWsJTEjbfhRoxJy11WPgd9AfhK8lQpwA/DDoU37UauuASRxjihrI/unI51ANqraSmaHWfVCOVw5yKJHeEOBYuEQu0VtAz8zWqG3PxECW1D8x/NTX1mPQiF356zkYQ7t/Cv0hyC2Sv8HjlXXioUP3ldhnt2G4tGe9zjZp4sqXmO qs1TreRLjB2/dj/6/WXXQSrzAIkTydSu5/6wZVNwqgO27yOpJPYn 6jwj4//.../bvjq7YWWLQjn0=

http://indir.gezginler.net/i/19629/31393632395f323031362d31312d3233/.../

http://gsf-cf.softonic.com/6ee/674/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69653577&instance=softonic_en&type=PROGRAM&Expires=1475730058&Signature=SI~tWY9iIRaC8FRuLPZfyLgs9NbU6uWfAaxkUkWxmthN8OsBPHLxYUld09QcYvxiGboQ2sth8YJUxVAKpbGeCSqU4bGQhqwU7N9mbj1t4-GhzC507ch00eFgG~u-T1rlc2Gm2haKv0j5HXRv64x~cGRpLkm1HfFvZ3Bwo~Qe0rY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ClocX160_x64.exe

http://gsf-cf.softonic.com/6ee/674/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69653577&instance=softonic_en&type=PROGRAM&Expires=1478589482&Signature=A7w~R6s-gsWIxpc34scc5xc7mX8DuKbuVJJ54TVvRvy6W5PcoT6Er9Qg2gatzkCx6igJ6PU2wOMAF-b9ZHlA2-vFrt-hGuMLUeKXr~jJwdixR19SHIdZdW4bIgbRwO44kw9WHs2engcmHx60cGwi~m1RYt0A7RosqYWqa3b6DZ4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ClocX160_x64.exe

http://gsf-cf.softonic.com/6ee/674/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69653577&instance=softonic_en&type=PROGRAM&Expires=1431748149&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OZF6aGN-8OAMCsf5toqxfRo10hmZdNGnK4yfm4j3VUl2Mhk0x6vpskHgU8qwu7mi0WPnHaefRPjKMH6137xGjysGHD2PAtdvSyVskQnkqM-I8YfecffufZVxroKECnJTC5VqF10clyrWnmG5H0lmCV4-WEE8HgHEmHbgR5wRlCw_&filename=ClocX160_x64.exe

http://clocx-64bit.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMshvoijGePxROxVWVAJHp47W 5jUdXHmPHeIsHJ49oE5JbBfpxAe oHy8QOE67taLgppVbYsmpdAasT0F1u6mn6SMK9JL8659jietHlwWpRLq7HEcM3qv8 jrtMO0Qwe6KhY1oW1pxHBn0dC1rZ3WujIEGfeaVJqBAJUKg3mh2LSCPVNz8McAb7VFtqPaz7QIJnT r3nDXT1TcEso8v2r3O2dIelXs3XuAtwz FjP vxWMbS DEA4kD47tKS1Jw6Iu3M5Dd8Hdnr3NCER 0cejAsqY2Z0x4echVk dnGBrEg2VnHa46fBe95yi aUDQfK6dFVf6G ZIKFNWXQS5hA3w3ulj9QWgf OceOIbRYl5tYtAR5087hkhg BCg8UgF7W4aCU trVa3 CX5IXRFfsbU5pv89kEAgPwSShbJE6Fo5X4hijJDcE7NdaHBWViMayYYcrZEylfc0Q1KPXcDmUSfJGi9gNxz6xumrBjcUhp15G7rVj6JIo6AwxotTkSbyG8pyQOPLt9dOazvEe2i8wSPEV4l4mFDwT oDkEY v34//.../bvjq7YWWLQjn0=

Latest 30 of 37 download URLs

Scan clocx160_x64.exe - Powered by Reason Core Security