home

foto2avi_setup_42.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
df7ea4c75468718a8b84217b65e56f88

SHA-1:
74a7bbe8c6db345544390279a8f9fcd12b9b4bb6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 6:49:19 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Win32.Generic.1253E4AA!307487914
23.00.65.14428

File size:
17.5 MB (18,361,078 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

File PE Metadata
Compilation timestamp:
9/26/2011 3:21:33 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:zZ8MVX49Yvg52CKORMEJxQZIRskx/IX24XQriSSJ/0rU2w4:zZ8M1PvYA3EJxR3i202QZ4

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file foto2avi_setup_42.exe has been seen being distributed by the following 30 URLs.

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_fr&type=PROGRAM&Expires=1456212936&Signature=JbMi6KrYkJWFNomApEVTA9TjWSkblK4RoVqpIcxmxnbXd4zhsNHn0rH~LmI-TMpVn0JXoZP0T8lYztitUhfAe-ybv5wWUN790SsbCYIaEmtV7~HrFEIJWW7wue7oPDmpuF7471BT5xGPBhrIhr048zF5SB~dOVMvPOlP7Vffa6s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_en&type=PROGRAM&Expires=1468466204&Signature=SGIgdW1aO1wRaHCEQ3eF1BNvUOjTSUh1OnCh3YJWV1ynggmq4JKOKt8wOU4u4cAPf02z0xC1glfup9rSKW4MjeNxdIUMyGuPDQ0EulQh8xisjGTJ8a6IJ1ETNq0rgoZkymEycCKJafDqAfaX3o8O~CrEYP4A6AtQ~gX4EC-JSqk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_br&type=PROGRAM&Expires=1471773735&Signature=K6lMhDBnlzubnr8muCqOaQnfd47IhkeVAzBOy2NTFYcvwX3C0BtdnF-hRSis7EouRs-GQN5dMPHnWIMSaf1fJTpP1jTLenHh8yQ94zHNQH8aR3HiVEcgIXMKC7FXa1OJAUEVB5mdydKY69ciy5jvpLMBxg7uZUkIojX1A0d6ldA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_es&type=PROGRAM&Expires=1464668099&Signature=YDr~zTZLdbFuTUFIqyKUtIJjhIKWirvLlp4rBpo2VtML0R3I~9R6anXSCAJ3D0Y9NVtAGKG0oZq7JCKqrrKqK9sa84PtpfeF7HOuhbw0Dn-Im2f5jJu6QwBKJXOATdORVZqynlekQEoINt4UBsxcuzalD-HmQlOTZ~FpGEVWIZI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_es&type=PROGRAM&Expires=1475188323&Signature=QDpTGu1QOF6p-T0JkaXoUFYynT7YieG0JYpmavFFqFxUzoBumHfJ6hmt0RfMihwoBO7K0-ohBAmI2TXsegrH69NYGrEapwgUSV0l7f42-bnioXOqf~bwrxvPQcwYTwA0zh6NZz2JDXT3XM5d8sJRCpokrzBQeCZfKYAK2SpouQY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_es&type=PROGRAM&Expires=1447996330&Signature=OYOPt4oYoYTCIsysx6uGMTl3oH9uKckLDCrN2xI2tutk2NO3DQFtOMlfFIKElx3uGlA-5DUFE-QL0SECSWvXE8dwhJNX95hrkWqI4BANVSHqAuobRiJVH~41zL3U7oAkyZ2~ACsNSAuOq9UOGvChjojWoPN0xkSGIZj0YXkiFXU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_fr&type=PROGRAM&Expires=1441780469&Signature=gcN9X4Wz1jHSPiMDRRC7GObtPnS03FFhyXLZ7aerltZdzyt2aLWRwp93kK18iF~aoTGF~KhKWMJWlyJd3YNDAhLareq112AW990-trWL4HrUKBE-O~ANNfKJuB0fq0ktLlGWqj~qyCKW3JIO~PRbybRJaaiI3DMUaHg-ZNztsmE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_fr&type=PROGRAM&Expires=1475819605&Signature=OHlNK7e9Ya8RpGoha5Sc2gxP-w85Go3wdDtABnv55lQXZhaSWiwc-X9yAdQ6oq~AkP8qv0~ankKfJXClGl5sjzgc6w3l1IaNyepl6bfZDq8CzRooz-DNsV0MEJ0N9o7QXfmcVWPX8FESy7rq4fCxQXYb-bwEeA~Mp3g5m0qnvQA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_en&type=PROGRAM&Expires=1476522051&Signature=IcTVuITZlcU~okTzgjAPyXWm6UB2~YEuSobMHPSG01HjkuaHMxZjqJ8KPPtaY6N~qUQpd3n9FQInSUi~HXCk8RP1jBSlNqGrQGn8dRHpyr~v3CqPfaL7cHwbAQ8LCwssZq1OzqL9cEq5MMGeHweOLvAAIVx7Ewwk1F0FH77bBWs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://pl.escolapia.cat/.../Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_fr&type=PROGRAM&Expires=1457094316&Signature=Y9HTz7-fo7~GX-6nh1y-6txKnk1x03zh4HLdue0Ij9ARcbi9vd42neBdgQyAfJtmQEpAUrBDI8Wg-jV-2blV3XfN~BnzqKVUto6yW6Ftf-wmlcVN74IWannWJ-R704aqWZm-wLi3XIDccE-yLWssQonCuON24F5EaEn5-Car3v4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_fr&type=PROGRAM&Expires=1464390137&Signature=D9hxgqyhnhmCM0hSrpn7uUmRbRTAjWTpTD4DwWtMJjmeVE0uyBAh83~4Rl3OyWXhpK-AKbE78QBJ-Ejqnq~VqjoGem1W7jkGUPX-Jz7T6TY6TDXsJ6pZ2LCkb3DGmWdLqQ1TBN~elqYTpCR1mNNcHNk6vzz9~ngfEG4CQYRhsLk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_es&type=PROGRAM&Expires=1478136957&Signature=IEAwV9B2guFs5LwPpEFQy6Mnr5vnpAaacwrDMHnPYS~kSzQZ1CXi7xIJVdytl~ec8paDcynWDrp7wQfyAx-GCKOhZ4vnZPQA3Ge59oY9L~5CV6bhlsiYravZD1FO0wBE8kxupvPXW9WApQwn2v08ycHFk9Kc806TLYurtU6cNNk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_br&type=PROGRAM&Expires=1475871570&Signature=A0DL6bTF8sakqD1hs~TOlBknYjioQlUasG8gdB7XxKlj6hm9EHeBwIUnwT6355PiTHSBRZ0Qc3--BQdqOe7IJku9NYj9aTOStqqhTT5yujz6kw4tavFLURpkdQ-vER~Js3YOvQVRfKqSo9dO~6Msefys87fOp5Y7SHH6n61ULxU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_fr&type=PROGRAM&Expires=1467464279&Signature=YTDmlOJQHhaTKIesbYYxZ3sbs3VuVzyXuLktQwsryomUuVfN~oa~TcJj~nRf1YHpjpc6bO3AL~pxuYz4AjI5iiRZafuDsPsmk0glEWGdME77u2fgKga-e0Vk2gNKQKhDHBunF3CWTjUei7ICEc1FkKJcm2C~ygHOatb5uvdOc7g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_en&type=PROGRAM&Expires=1469148559&Signature=Jd62PDBDh-PtiZNYbXLNbVpwOuCLstdyNqLuYaGWHQoDV4dH6slaSdm6DCQ4dn6DxDwDrK0pzyJ91Ymihu9aMkfS0Y6B2uKLoXOxhtn4mmzq4s87CYkW2Bvq-bMocKkEqR8rG~eMBvaud8sbuHWL3lhJ4CByScrl891kMoTb74g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_en&type=PROGRAM&Expires=1457408633&Signature=FkC-INpMC4S~MbEgBJgCnK-iZNqGuefTzZtwmH-5TDSDRAOestupUPrRO2Yi6dXlOxoGb8oObYgfSlEUdnWZT-BzBlzjNByy~2MhXRWPOMRx4~QizRRFY2jMMSV14plLB6hf37ytxo1SCMr-EKVco6G8IM7szd~4IJaJDY6SZGw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_fr&type=PROGRAM&Expires=1472480708&Signature=FjZI--HaLJRNWQ-6KhO0Jm2aub7TUYUmZuMM-MiIP8qc9ecgca56y5pOfjzylZhUAJrn4WE7P09NuoVuY~GaE1N0ekSn4QBgxAAIonxeCf3rD3Tbe~kCGOqhwjk5x0CzduoevBb7-FAQyJ1HUyFtYAunvJ7wFrg5KOal7df3kA8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_en&type=PROGRAM&Expires=1440775452&Signature=DvzWajCrxNxUPDaUMWnxADPP5lfrLhw5QyeHy7dFFnxI~DHVVhMv-ZG~R1Dp1NS4QcXBBGu07p-YIV0ewwJ~2ystXd2BplTeiEohBMmRo-iN1oun50l85RWu~X8ZmAC3lc5~3gDzgsP8GkflsRxlwTVBMUFYo9Qdz90UAntb~jg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

https://onedrive.live.com/download.aspx?cid=1024B4FF999DA333&authKey=!AE1Y8YoKbaEa94s&resid=1024B4FF999DA333!137&ithint=.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_fr&type=PROGRAM&Expires=1436423522&Signature=MPz4Tbr14FsNl-WKuKBUZIBTodY3SFAeQp3tmHC4~ZQchgCvAnq02k1vBBky7~LYBfHMoUa34Bv7~Cr6ZfdciK87--Xu3Jz8HpjVHTkDw4lEiaVlUWjbY0Yb~F3RueWURWCX9BQv9GNjBw~67tA~B3lkyIQAOGNliKuRwAe6KgE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_en&type=PROGRAM&Expires=1452376680&Signature=iZxROXnRjk66~AIkESxBebMXbrF6q4cSRA6T9J7qlD3B6fJE1d5xmH2XyGPFmeh569Ax7IiQPosWOygoaq8-k4De3Fk1RWwCOVPU1HfBsL~1Rvp8x4vrzuX2IqJUTs251rtLywgKajVa11InEDZTuFVAFf~E6vxkZekFZuPDwF4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_en&type=PROGRAM&Expires=1453100569&Signature=hT83RKWOPvbdmcXM4pBv6lE6KHNVvJuAQuQvcKcPZhxJS3SoHTtMeSAQikBbQVPiZr-5S0MvODywmB~MsYxfPFdYgF0Ve4DI2K06CPataf0Ysn7s3O~J9xm1Zosx~MLLJ8jyKUzikiocIwQfvrYZcGG9qFgVKi~mfnZFjCH-ZnA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://www.programosy.pl/.../pobierz,foto2avi,2.html

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_en&type=PROGRAM&Expires=1454818415&Signature=GSuKaxmlsgRgYk8C0I7-OwUBiRhJrSazkg3fTFB~-DgG04IjSgXJwubXD7y2fa~wbkT4kb6lsPF~ULwuVj6nBOCwNS5fH1mBFn6bPlbuksnMhVkEYPkNqx91DeCVWuO~MbpMTQZv5rIlmL3VJ59fnCgPosJTurNKLTFQid5PY7M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_en&type=PROGRAM&Expires=1445700675&Signature=OgTy4KHC-TLFq~NtBKB9qMMTtOzchmMfrwVDi9u6x0feYk~q~O4N6nVV9AtC700MxuYA7u53indOlxr8NCZjfkDhmj4dFdQPDgg-s9ezL5oIh5OwyKL8qYSYHQNgohsR~JKX01rfoWR9Qkykuu7OCHWdAgYDbYYFW3fGK6S2zlU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Foto2Avi_Setup_42.exe

http://gsf-cf.softonic.com/74a/7bb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=63372&instance=softonic_fr&type=PROGRAM&Expires=1434941279&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=JjtD5RKwIpBPfec27hi~QSoh8QnhsbN5wJjKUkwRMKuq4ySSkBw34XI4ZvpDwuodPjx24YPScDU29tNe4a1C9a41jY9URm3iROEyDI-OU5UOtKjyyAC-tT27KFVH9gjgpfbKoEieK1MIzHVhNqVT5v~sIfFGcwGgf3CCfDTeLNU_&filename=Foto2Avi_Setup_42.exe

https://docs.google.com/uc?authuser=0&id=0B7nKMWPhyfl-ei01bXJrNWdjaHM&export=download

https://content.wuala.com/contents/trustfm/TrustFm/Foto2Avi/42/.../?dl=1&key=zooEg0NCJKsT

https://onedrive.live.com/download.aspx?cid=1024B4FF999DA333&resid=1024B4FF999DA333!137&authkey=!AE1Y8YoKbaEa94s&canary=

Latest 30 of 30 download URLs

Scan foto2avi_setup_42.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.