home

ghostmouse-setup.exe

GhostMouse

Yang Cai

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from download1648.mediafire.com and multiple other hosts.
Publisher:
ghost-mouse.com   (signed by Yang Cai)

Product:
GhostMouse

Description:
Ghost Mouse

Version:
GhostMouse Free V3.2

MD5:
c61868e9d8f5d57a3c3e97d683fda9c9

SHA-1:
2617944bae7e2eb48b1321bf0c60e1875c6ed930

SHA-256:
e702e815c6dc59ce205f521c10926c245bc9f1d84d2cab16247a7bc39129641e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:35:10 PM UTC  (today)

File size:
889.4 KB (910,736 bytes)

Product version:
Free V3.2.1

Copyright:
www.ghost-mouse.com

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\ghostmouse-setup.exe

Digital Signature
Signed by:
Yang Cai

Authority:
StartCom Ltd.

Valid from:
4/5/2012 6:06:08 PM

Valid to:
4/7/2014 2:49:25 PM

Subject:
E=info@remouse.com, CN=Yang Cai, L=NanChong, S=Sichuan, C=CN, Description=Qu3en5jyPutQkHg5

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
05C1

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Ana3TgFZgReHMpej03ZDKJ4guOq/hXkS3rJQBtUkBg5L:Aa0FZRUej03YJbq/hLinXBgt

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9767

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file ghostmouse-setup.exe has been seen being distributed by the following 31 URLs.

http://download1648.mediafire.com/k3048k18octg/.../GhostMouse-Setup.exe

http://download1648.mediafire.com/7mq76yg7kwyg/.../GhostMouse-Setup.exe

http://download1984.mediafire.com/g5gbvzeln1hg/.../GhostMouse-Setup.exe

http://download1384.mediafire.com/3vo6ofnz4otg/.../GhostMouse-Setup.exe

http://download1684.mediafire.com/wjnf38f34c0g/.../GhostMouse-Setup.exe

http://www.programlar.com/.../?operation=download.complete&contentType=none&panel=client&module=prg&objectId=15J0jJS1YHa&random=20151228155648.9f0m8mp84ap0dfq5jeqhr73l46.796

http://download2087.mediafire.com/oc3i9dnzh3ag/.../GhostMouse-Setup.exe

http://download2087.mediafire.com/p71u56rxn6tg/.../GhostMouse-Setup.exe

http://download2087.mediafire.com/awk0rga3alrg/.../GhostMouse-Setup.exe

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../GhostMouse-Setup.exe

http://download2087.mediafire.com/ixvavrl9bing/.../GhostMouse-Setup.exe

http://download2087.mediafire.com/hp7ybsotsqkg/.../GhostMouse-Setup.exe

http://download1648.mediafire.com/0vfv443yic4g/.../GhostMouse-Setup.exe

http://download1984.mediafire.com/7yp7bnbyz9fg/.../GhostMouse-Setup.exe

http://download1648.mediafire.com/w97v8qjapn5g/.../GhostMouse-Setup.exe

http://download1648.mediafire.com/dxq1djq0najg/.../GhostMouse-Setup.exe

http://gsf-cf.softonic.com/261/794/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69673861&instance=softonic_en&type=PROGRAM&Expires=1457215206&Signature=PTnNNySe4xxc9NxV-jvEHl1zVJGMQdUa2mqBwkYf~zu-SoHFtCOUdPG94L5YY8OPZ~GCYXihVI1Zyp4zaYp3fqM~4DPZUoZP33oIEJn~CSpCYFqJvleYMKBJkUc0VA-WibCRTtu0~fAa73~aCLXjbFvyr54ijWBtQpR8ntQudtI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GhostMouse-Setup.exe

http://gsf-cf.softonic.com/261/794/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69673861&instance=softonic_en&type=PROGRAM&Expires=1455289289&Signature=MwspQddA6PlQ~FM~FOJTP1UtEOh42Zj8U93qMgxiwqejYaBdX5iEt9jpsXjg8nPsuJ5SRfT78s6TAzW8yQjkB3FFbwFZ3fkdD2mo-4bVw4xodso4Hqw5B~2QLr9AQiRuDU8biJgIvk0TEiGwTb82yjwZYeMgTF8I5zBdDJKs45w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GhostMouse-Setup.exe

http://download1648.mediafire.com/vcg8p39m18dg/.../GhostMouse-Setup.exe

http://download1984.mediafire.com/22x7b2ip1kpg/.../GhostMouse-Setup.exe

http://download1984.mediafire.com/ent7pj8ijtbg/.../GhostMouse-Setup.exe

http://static.download.pcformat.pl/files/c/4/6/.../GhostMouse-Setup.exe

http://static.download.pcformat.pl/files/b/3/7/.../GhostMouse-Setup.exe

http://download1984.mediafire.com/d7d71hi9duag/.../GhostMouse-Setup.exe

http://download1984.mediafire.com/t31e4abou3tg/.../GhostMouse-Setup.exe

http://download.softpedia.com/dl/275f069df2c8dca700f0bcdb094b9b97/552abe73/100117463/software/.../GhostMouse-Setup.exe

http://down.ghost-mouse.com/GhostMouse-Setup.exe

http://software-files-a.cnet.com/s/software/12/62/77/.../GhostMouse-Setup.exe

http://www.programlar.com/.../?operation=download.complete&contentType=none&panel=client&module=prg&objectId=15J0jJS1YHa&random=20140128190534.5sevg9c3sto4lp8vi1t03o52u2.948

http://software-files-a.cnet.com/s/software/13/40/21/.../GhostMouse-Setup.exe

Latest 30 of 31 download URLs

Scan ghostmouse-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.