home

codevisualeditor.exe

Fatesoft.com

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Fatesoft.com

Description:
Code Visual Editor Setup

MD5:
40f54678bb615645d1aa2c8909b77409

SHA-1:
fb05448165265918497197715b53f780a1a2999e

SHA-256:
1e313abb6dae470801a1bb63e05558c388067f3e8fdacdbd0096d65da4220ffd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:30:09 AM UTC  (today)

File size:
1.5 MB (1,581,864 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:7I39dyL9h6rgX9InzulN7QDiF+JCtJc7+Ef5QkbXwFVtcx+sFDAZyFV/uN4vo+X4:76d49h6rI9Sul8iEJCc32rw+yukX4

Entry address:
0x97F0

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, D6, 98, FF, FF, E8, DD, AA, FF, FF, E8, 00, CD, FF, FF, E8, 47, CD, FF, FF, E8, 3E, F3, FF, FF, E8, A5, F4, FF, FF, 33, C0, 55, 68, 9A, 9E, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 50, 9E, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 5A, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C0, D1, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 87, 99, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9906

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file codevisualeditor.exe has been seen being distributed by the following 11 URLs.

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1435086917&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=c5bJjcjuOcJx5ne22yQLbvmrsQyYV1RNSlpRUaSIIgqOQtQd6RMSQb82~mt3ScJ33ssp2gqiiBfUrmMD6iYQPhEZBtjiL04d6Urd6jNavpKpofqfUpzb5w6DkbSv0wiN7vKUpwl2PYlD1vkgDHVA2HmKNoqwrli6Z-8~iYgsRQs_&filename=CodeVisualEditor.exe

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1446617724&Signature=NrWiSZJxilkCFuSkxwSNK5D4l6SXIJPTKGezIpw17FlwG8HAvLDECjWy~~abVyu-vs0VTWCDwfHchoWZMP~o31EZWoKVO5WI9dAFvHcOS5TJRjCJkVhtu--kFte4vRoBqwqqgEKq6WeTL4SUYeQudRVsdbBh8aH2rrmLGJyuFNA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CodeVisualEditor.exe

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1447545600&Signature=XUifgEkkmbdJZlh7GiQxwR2Uh9dsOza17gqdiRQGFJ4~2VgwNR7kXmRNnG3IyxK~4lslC~3k7D21XaXh9~jiwwmmjC5rZyB~h4B1pWBgZBpsM73992B9JFmL48aSFzOD54SxkGAzX4YkqH3HV~4Q6Y6eaybN9Lp9EjH7zadkJY4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CodeVisualEditor.exe

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1439363024&Signature=dJ0nVByhuGbRyH7b4vq48XZhyVFtg5nc5ug8ZeBqlBAKMrt7vmcf3-GTb4erkNFAn90Odf5lW1kOeCB7Pt8vZss5u0lgpsBKtntRh3O9MLSm7gR8HvsikqxteX3F0dw6qqWe5pt5~KlBXwCGpsbBueT~X-J6F0CGVh3mctg2I~Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CodeVisualEditor.exe

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1457659519&Signature=c7Un9UlWHBAwH9BVnDLox2bsKM9PUo2a6LAE4QKiiA6m4ne85ipssxREo-VKbnZ~0H9wOnwPLXvDsRiGjJ3Hcsuq8afkdvkTYPRGHWxrQ69sFCLPYmWyeVgcFtNCp5AoB3-z2C0wncG2J59IFcd22~05C~Cxr8~6F4N5bdTnkro_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CodeVisualEditor.exe

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1452697798&Signature=XK03321ury3vrM8lk4m3Y2~zoNB-1qGQnDsvcVy75-~l5xdVZkCUmjHdBMQR4x2Tvlu030hhXtilo37PnDCi5Fo58Nv5PpopGUtakDq6U4R0FOstMDZLF5MuqvUUL5EXw5e8bz-d3vD64HuTER~JVdg9C~5F7~APLAmjrtNpTyg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CodeVisualEditor.exe

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1430258847&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=L7MercmvNZ5xb6kqGxsjq0M1bjRdpYH06fOANQLfJdkNL5aMCG8yxyLt03m6CyOkisNQ-Y5uPFeqVV67G2yn~VeiJKvnXSqx4DJQnXatVIfVWQKT5lN7eWACED~Z4XlLcHzGDe03myP-yuvXPLpoIiRoAmBdNMi9y~6YRd6SYn8_&filename=CodeVisualEditor.exe

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1446536256&Signature=HKYVE61qknmqkm7~x6~XSXEWI0v7EGy7WFFJo-Ci4bTBkaMm9b3GEFkfSA~sTNQweabI8JtX7LVk2IbHvMsFFypegn29s5hLhBZMkqX81D-2~-Tcgqfn3p0Z70oPGNSIWvro~51vvUFUu1DV~Fmi9l9xULYEGQ7wPkztOgsM2lg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CodeVisualEditor.exe

http://cf.softonicdownloads.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1430880094&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XZg00CIbb4R08GG94fruIityYiLDZGkxMg7EYidleSsSY8i1K08o2kH3NiETCYYhcGqPrA3SeNShu2Sg8zsqEbe-lJ1fO-Ai0hM3-ux~HMHhEkKKdBIyX9ljP134EXTfUPL3cA4~x-lvxayv15wlI2EYGcSSeTYeb9nfzeUoMAI_&filename=CodeVisualEditor.exe

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1447159464&Signature=V3Lok5ErstIWWtzAyOhaI7OXQ-AEK9-~1PGYwBjYqMLUB-T2GSKgA0wcmg1G7wzMkWhj1jiOlASlzTp3Ng7H2or9NbX1ZzDdrbA4Edrs97jHQjhkhjZdYX6RaHjmZg8VMKa5Eqicnv30F-FUYmzpCngoMV6YxGit9hhIBFkVEx8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CodeVisualEditor.exe

http://gsf-cf.softonic.com/fb0/544/.../file?SD_used=0&channel=WEB&fdh=no&id_file=52995&instance=softonic_en&type=PROGRAM&Expires=1456007156&Signature=hkSgvREQjt40PIOARY9QZ~2Sw3oftwPrN7kuBZS0OKHbgkHElDSi4BvQcqPcireu~gwhYLAoaiBBK5vh3ccN5QzUai3RtWvvQCGzaeMNw0mTvfnV2NUCcOZ3f7HmeVxnSI8qVMU3Aq-B5K8JngNgz85eUuH9cDVY499Ij7Q4lGA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CodeVisualEditor.exe

Scan codevisualeditor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.