home

freearc-0.666-win32.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
ac9965929ace2fe583bef8e27be1abe0

SHA-1:
2b482a5834c30cda2c2c830defd3da88d4e24de0

SHA-256:
a9952df6b9ade9aff0b78bb33a071ddea1d2290d2d4edbc8ad6a065fe2fe170f

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 1:01:22 AM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.131222

File size:
7.6 MB (7,938,425 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\freearc-0.666-win32.exe

File PE Metadata
Compilation timestamp:
2/21/2009 10:47:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:LCY+W8Ph2D5S3tjSkEjyBwyDxasVZjWBxdWeNc9boNx6TUBx5Sk8So0Jg6agbxKx:LG2D5QB7DxacZiB6eNcHq5StAxYNT

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 6F, 44, 00, E8, 05, 2C, 00, 00, A3, A4, 6E, 44, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, 9C, 42, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 2E, 44, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, F0, 46, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9995

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file freearc-0.666-win32.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_br&type=PROGRAM&Expires=1482379014&Signature=d4SUQ6Vo-NLJ31r1YAewayQSQmT2ftT6brP2we1yhkhQt-emA2VwtDJcErxuxd7EwTF8c-lGZ21g4fLaBkwCXb9gMAM7VWQlnG1gTPf6yWNwM7Qo9FowcBFPXm4gOYWhfjBVaqGejbW6DyBz8r8JlQTz~KOOuxjmzega709L7x0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_br&type=PROGRAM&Expires=1487219588&Signature=TNauI5G7fwxc~Tqkihhh4qB~BiXqogesZ0QAiQR9EtHkTRs~NoQdwiUwgmK0ID-dx01ztfdBymkYw90Bjk8g2JXhPcpamhcQtSduiv-~LPIED3wS6ZD7s88CAKpi5a704N-kwSCgugklWhZymildl~zw3I~abYMPrgKST7Q-8S4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://download1138.mediafire.com/rp6jn45v0jgg/.../FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_en&type=PROGRAM&Expires=1444800955&Signature=SkFmzOog21wnMfVBgE38p2jkUmp8rSgXA-cthRMWqckhHE7uuVAW4tNC-dbzG1Q0PNlNpKIBe4owxfYoTwP91tiXS6wGl7lSdsUBpZCiM29ithCPG2ew3ggITvokVP27ASBbx9Au0t8uGtudSzprN310HFFcSEjcu~BhxwIrCT0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

&onid=2250&oid=3001-2250_4-75764246&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/file-compression&topicbrcrm=&pid=12705936&mfgid=10240876&merid=10240876&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=85fab3d0e358992ba0272deb&viewguid=f-OF1t65e58yO6lORNnesDDhpRDNkfEGmNdt&destUrl=http://files.downloadnow.com/s/software/12/70/59/.../FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_en&type=PROGRAM&Expires=1465517574&Signature=SVX0zp~Vw03TRoURgr7AVBs76g0yK7aqYBTLAcWB5W6s0CHAJ9vd328CHzWrxPgTHrMakscMwg88-rquDTj10mG8UzhSi-5ukMlu4~691Mb46q4RvHIXkeAj~ZqLALJy38YBAKYzcLuIh2Snp4pwRbDWmUhq0uozQUjATckXGa4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_pl&type=PROGRAM&Expires=1474601998&Signature=XE5o4jiNsF1kqRkbSWJyRfq6ao0mbx1dW8CEsCL4q7CCX5Od0tH0RlbAJQ7YriMvNhNvlCo4DA~7oMpnAsJdIcsrQroUq9G9~OzmvglejvQIHY5rQtCjurcoKTtNYW1Qxetnqydhg-beiFBLHnF3tFlJtoyTT78KkIp38ULGZ5Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_br&type=PROGRAM&Expires=1477211713&Signature=CN1s0OHgxNki~9ZKaCQ4Blrm7eUrtkfDeShRWsqt3UMwp4LT3ZWfrnzhl~mddOihl4wn8Z80Rcf5cm8UbHdWc-Q5Dfcv7Zevj23BAJGye0PRwWGPt8Ps36uMqVxgMtXgMTnRQKSpqOUqbqhzYY3UERbTXb3Y8b4OhBQTTkHUzOc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_es&type=PROGRAM&Expires=1480248407&Signature=FCBJj-Rj~SNgTwMwq8ZLVfLo5IEIrhMXHfnwdwt676AwA~NmEH9~ociJsqtTRFELzqJROQTdyI5wUfm7fEpujQeDzfH7TJK85KPVQRQJNyMIXca7ErELwhz6Wy1ZTb52vFmyPFwDzvALHBAZo-zoNzyVf9CYeUuz4A1~GFHsu-c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_fr&type=PROGRAM&Expires=1463394636&Signature=WUmMETSwCRqEiK0S2BoxZy~jOtgu1woVyzgaIzuYCaNhddugPAwkwncD3DWLom0NMx3Eh3A4ocf1D4p-ZmCeoFYjsse2zSTH3vxFUH0Q-YEStWQ0imrpVzvfoTTU9TFKBU7CFRr-a0nPGMeeFlpUkk-SEfPRDXYyjMAg8ck-eFw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_fr&type=PROGRAM&Expires=1479345269&Signature=d7bhtp2CaVo9ZriGyc6ZL5dba263amaPcnBN~phjNbLb0pzD0YJ0jaMukKzJf9dQFx1Flp22JHDfeAA9Mb2a9xIEon8QAOQLRBU72htIzs07uaBpxKnVhOCRa6L4Z3U3psQzZWW7yKn-An0Yf1v9fV1IzJSPYcRAMbt6tCo2Gto_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_it&type=PROGRAM&Expires=1469643071&Signature=Y9JJHV4UsBZIDL1YTA89nMBjnqtGL7avjwOX8mU4kZRD7VUqJiJolFKjDXHMiNXnrpZDWjS9BB3DKRZ24G7hoATMSMhfD5I9QiR222ItUqzDE490~1mK2l4fVH6EVUC97nGcmEPM9ZSinTIyGBnuNY0PiHK1kZXRmSXIW1yIYRA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://download1223.mediafire.com/mxkdtiodl0tg/.../FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_pl&type=PROGRAM&Expires=1477154137&Signature=AIdGFEqTO9uRyfu9A9yzqu9WA~ALLfYXkwhLy83QOopgGJWOk0mqH-hGZmBRDHurscAWzOqSAl9vEofnqyg1gtNkQxHv6kFNAmo6QhaCjDy5k7ZMkMv9YYo21VoVB7j-kLYiDErvv0AWyJmDDeNMvSbX29gAat-yWsSKFS~~AU8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

https://mega.nz/persistent/.../38MjHCTJ

http://passthrough.fw-notify.net/download/908391/http://freearc.org/download/.../FreeArc-0.666-win32.exe

http://www.ranchsendgift.com/FSb8L_oRE9hgNOVQl6a_9C9yAWAYccqy9GvLzMoj8Krn_nQqrQGhPzoKrCaFgIDkf SxjHWMWweaCpQ7oDe_jaTq0222uSgkWqG crXvotrxaQWJEU_nfsTuD4RBQmiFHXc_SBeS4xxLrjEYbXqCP09H8PSv27QkrvLSuCx6DZY7aOXawgG7OUb _hMnlxp YJL5JWa_E0jyZsY28ltwqFSUqXL0FA==-GzgAAETnFhPAcHu3WLpjDxbDi4JDDti_PZHALA0mcoBRW3C4b4zpVm a6It0ALFETrUx7J07yvkJ

http://ar.softoware.net/get-freearc.html?ir=1

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_br&type=PROGRAM&Expires=1474091352&Signature=YrkF5ZuoQGMzX8gu8UdyL2~TSYoqu0sW34EOkVVW2aYrhkPXvZQzT900pGYtu536~QiMHwnJXQzGpRCEaYIkmQ5vVj8lB5tXV4oCB~Cdd9dFxmtO6FtFcUTjZW9p4IMuFQjaSyJgRzkrzTxkj9q4wZXWbzcxPFTn9hhdM5wMJ4g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_en&type=PROGRAM&Expires=1471726327&Signature=OE~Goh~Kj69WXs9kkMk3xqUSn2FfYdVXRHAn7O5RK7gDz1qT~BINHS1gQBUIIPxr85x0npmv7~3QvKzmXyYWSnB6V9CbV7936cYWiQrNokWX78aE5Z8lhW4xkiKgu2qTN3V6uHaSjpbc-feD0oe7iOCydhsZA-dyd-BRSKhqn1E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_br&type=PROGRAM&Expires=1472200753&Signature=EGhc70k52R9F38kCxM9DI7al~yM4rxMRd5MNOgTP1PxW268qm6M25MNANYmNc0Wu3uy-q1b4K3aQ-Vm6CZ1zBtTk-8aJI6SwVzriuEqnWGGTUc3ufgzwoyVS-hO8HUfKLCtNURIyYD44YdUn8YIPlZb44CK9tW08Unh8Kc~Tjyg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://www.ranchsendgift.com/OIdeiUiZ32otg3lT6qwHk20Nun7NWVKGKbonB2OGWy0x5kDv30zQDg__fNJYXSQFZLMm1kOsSbfTcCJVD8ZciifMRG6 FSTEihXbbGynA6kAI_3zajp9kvZHjxZSOr4ld5XmweazZ m VmX6w1cz i5xzqKDsjOIKWqwFclPtlrwjxIuO6f_LjOVj2jtC Z_WGRxYuybmzPR_FLRtCjmQVaMvV_XSQ==-GzgAAETnFhPAcHu3WLpjDxbDi4JDDti_PZHALA0mcoBRW3C4b4zpVm a6It0ALFETrUx7J07yvkJ

http://www.towerbitscenter.com/9Aao99U3NZvMEYEm9hOUkh3lo9986 zYdX3LIcpDx1Whv1CrmuEZmzoi6pM_UUIAja8iNzxS4qX33wK4 _KG6XfNBYhg2967QIgut7K_PK9XQy2jFUIz9zGHwseyw8G86PPZezusaKxXF Ieg8R6od4pzNUqJDnunebJ2SLV_QBqw WP_Fa67FQacwaSa65dNrgaSK7o D1nBR6ClVuYkw3koQc0rQ==-GzgAAETnFhPAcHu3WLpjDxbDi4JDDti_PZHALA0mcoBRW3C4b4zpVm a6It0ALFETrUx7J07yvkJ

http://download1647.mediafire.com/u85n8zf111lg/.../FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_br&type=PROGRAM&Expires=1475715895&Signature=gK~JpU2BvrzlI15YJCBknlTW~el4B0tvQDtFjyDQ1QRStvGXwVySREeXJxBDStuU3jNaum4tWyVmhrifTZ4IWLA00WncehglPn0ZCFexnvm6Op~8hwXYHI4xz3-Ot8e0lpltsPEwqxYlCGPxUAmhb6cU7NUByhV8nwZbDAoMEeQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_br&type=PROGRAM&Expires=1478345555&Signature=TsBZCUpt9DlgV6NGbkPXnasJ05-YIakHMnTj52lR3dQmYIBZpuPSew5JYBN7IVeDHh8oyiCKEOo8ZX4rkvGB9PYH8AfJNavmCxNkk2WlDB4Gwug2DumpDDuc4rrYFDChTYTiIim3-LVhLRGswlaHaUIG0SLTR31QzPjrGQHQMlA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

http://www.ranchsendgift.com/vOfGUns3cUG oXOjOiRFvUbB6p4wps8yIuafv2OHrg5_uUV0az5av_mCKRQ4GNapZMaLCavENLJLObIxda9W5vEsWjahsb_0pXsTvB_avg2IvLoLdKZfLCRcvmtj26Q0jvVC6f8BfcW0WtBFFdetevTJJI4MGREJIs_VbBoTfDOmvCO6 uhDC0fQa7BOmlmDgqNGZNfTrHUkt2WAWgMBP9gRAB_ngA==-GzgAAETnFhPAcHu3WLpjDxbDi4JDDti_PZHALA0mcoBRW3C4b4zpVm a6It0ALFETrUx7J07yvkJ

http://www.techtudo.com.br/_/software/.../download

http://download2157.mediafire.com/sjl72668szxg/.../free arc.exe

http://gsf-cf.softonic.com/2b4/82a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=81783&instance=softonic_es&type=PROGRAM&Expires=1471539046&Signature=fVWpCofS19mpWeJBth3TEEbsqS93HnMSfnq3gMoerdHvasY0ixVZnwwDRv18GVlGjgEynkM02584Y7jSTZ1tzTkUBoLNKX0~7AQKhGAaxq6c9y~OSVVecs1ud4pqUdOMic3cEIIyysu1NrUK2BMpq1DyfsVAhPkne9iuKRmLmbA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeArc-0.666-win32.exe

Latest 30 of 85 download URLs

Scan freearc-0.666-win32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.