dfx11setup.exe

DFX

Power Technology

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from s6724.chomikuj.pl and multiple other hosts.
Publisher:
Power Technology  (signed and verified)

Product:
DFX

Version:
11.400.0.0

MD5:
6867d0651fb9f9ae8a587adc832badfe

SHA-1:
458fa061efe296e96c8c9301c85b6f41214f7d57

SHA-256:
94b4963aeebb5ab04108e675813483cab48053ca7ee220fd68d05322182c93fa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:14:59 AM UTC  (today)

File size:
4.6 MB (4,863,240 bytes)

Copyright:
© Power Technology

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\dfx11setup.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
4/23/2013 6:00:00 PM

Valid to:
4/24/2018 5:59:59 PM

Subject:
CN=Power Technology, O=Power Technology, STREET=100 North Hill Dr, STREET=Unit 24, L=Brisbane, S=CA, PostalCode=94005, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
1953BFF7773C9644F9AA285A2E2A49AF

File PE Metadata
Compilation timestamp:
2/24/2012 1:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:UGskW9AIufMCQH5epU804dWtFTaFzy0f9hAswMNC:09AIuBQ5epy4uSzy0f9hRm

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.9964

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file dfx11setup.exe has been seen being distributed by the following 40 URLs.

http://s6724.chomikuj.pl/File.aspx?e=C5wA2XkhLDKgok1kwsrZJtBtfsBRhht1dh72-bd21AcohZtCb1K0eI7Vs7S4TvQS9ufHDP_TzNoBPpRl_L3jSHP-mrncqC_rlMVruNc-BLYojp_vAbbKDz1HAnXwoW9PXwqBlaOl3a6oN7_TcMR4dg&pv=2

http://s6724.chomikuj.pl/File.aspx?e=C5wA2XkhLDKgok1kwsrZJtBtfsBRhht1dh72-bd21AfZPD9f45VglSL30FfR79lpoQwrv7UEgx5lO_fCZJE8mHVrjQKS-H92ymR5pYkmef2vw6AzHCjKSHcHtyMt1HwN70LEIN76W_fvlHTX6eAniw&pv=2

http://s6724.chomikuj.pl/File.aspx?e=C5wA2XkhLDKgok1kwsrZJtBtfsBRhht1dh72-bd21AcPfRpD-y4juOHEqrAbTg0ZdsH08Af0158tPU_iuA2my6j4VvKNt9gy_xiz0y6PnO7YZqObJ3nJqBB0vgl80VCBSDjsP5mhl37VUNUw6sU-qw&pv=2

http://software-files-a.cnet.com/s/software/14/.../12/.../dfx11Setup.exe

http://s6724.chomikuj.pl/File.aspx?e=C5wA2XkhLDKgok1kwsrZJtBtfsBRhht1dh72-bd21ActyYglznkDhsxza_3GJEOkd0RXP39geub5c3pz1arRBOPjZn0keEZWF5Ie4v3W-nlX9xhN1iVWejqiPm-1fI4QUsy-NJ-VKoYcjoVqIa-V3w&pv=2

https://sites.fastspring.com/fxsound/order/.../FXS150719-1733-70690F

https://sites.fastspring.com/fxsound/order/.../FXS150804-6310-14246F

http://s6724.chomikuj.pl/File.aspx?e=C5wA2XkhLDKgok1kwsrZJtBtfsBRhht1dh72-bd21AdNbNzcg0BNJZ4oWKLECeJcC1PzAB7elj3nXyVWEQHp3JYJHFAPCIVQzh1no2A3SwiZUDjdGyZu4AZS9b9phDX8e6OrjOz30h0HoZuW-kwQSA&pv=2

http://www.softexia.com/.../dfx11Setup_softexia.com.exe

Latest 30 of 40 download URLs

Scan dfx11setup.exe - Powered by Reason Core Security