home

grandchase_install.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
07e41353b365f2ae0e9702b534a69aec

SHA-1:
5bee6c4f1db027a9d96d3ca81cdc2c087dc01c45

SHA-256:
6e622021005cfc395182aba570d2e366a00ea203f5524f66f792e5ba24ee2e75

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 12:35:01 PM UTC  (today)

File size:
577.8 MB (605,849,661 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\grandchase_install.exe

File PE Metadata
Compilation timestamp:
5/5/2007 7:23:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12582912:NRyswY5q0ZTmnfxZvGC4GXoCEtCuuW/mxCS15GoHv1BOADUfmYJbFmN3pEacR6w/:NRysHwqmnfxZvGeXoCUCuKYE/HvPwDwi

Entry address:
0x3161

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 53, FF, 15, 78, 72, 40, 00, A3, B4, 3F, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, C8, F4, 41, 00, FF, 15, 54, 71, 40, 00, 68, C8, 91, 40, 00, 68, 00, 37, 42, 00, E8, 82, 27, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 70, 27, 00, 00, 53, FF, 15, 08, 71, 40, 00, 80, 3D, 00, 90, 42, 00, 22, A3, 00, 3F, 42, 00, 8B, C7, 75, 0A...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22 KB (22,528 bytes)

The file grandchase_install.exe has been seen being distributed by the following 46 URLs.

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1459697795&Signature=btq0cqdJ~rAQjnOSQyt9k2eVzsWTNAQXwW~~01e8St8~HU2oE~RbRzA6E-AtjkcfvNLgXHyjYdt~2BJPARMq8uj7EyxTFPUjcl9zZh6cGxBW-FhhAjqhSwa2hqRkrBPcZ2T4NMQn0jS-7ztoKB~8Ak8qiiwGBZ6j-DtxYVWil54_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_en&type=PROGRAM&Expires=1487644871&Signature=O6bSv9exTidGWsoNcU7ykugavFGTEXLtUOTrkhCX1OOjM3DeHSrruFlZvkkEy-5vn5iC6tjSDNZTYkH3gBcExazeyWi0OXO7cMzM8~1x~-~EUfMdWM4DOpRk4fGRuXaa8IIIeZXGjqVTlzF9qbxeOo2jZU1GdSuOxYjlMEZxpTM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_en&type=PROGRAM&Expires=1476201172&Signature=f~gmr392iCnltB8BzzSHHcNBE2yWqEk2f9mpRKbryvDvnEV-MjZRR~ZR5XH8ShKee7j609ZWywfYZYpg5CAgjCRS-rPuqFUXryx7gwK9GxpyXObdtkvNxAhRQWSZL0uhJeI~eiBrk8GdA9bCdIyT0a1lDjRIXsIYAFw1zlPFqbw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1484050605&Signature=H6XdUlUHpTOgjZm74qeIF42ZVCu7MMphF3AJEAty2CsBrn8VYJFWHnrjNwGOLxBTzYokM9vlbWWx08A0UQjX40N9AAwjVC6n1k7arXcI-s8xdVVZcSYOAAo2Vj0UhsM2bUTkZzc5SY9UBG0jxpGVKIgSannHHczBe2Rr-SV9g8Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1481254072&Signature=FK-VTBG66elhoXkpJfTWGGq1Z15-CjIuy7DKN3cXCMyLMsW5D2cxc4TQwi5xLrMWT0d57-i-nJQfPNJ-fQYKYh3cWp3yyX2gbi6wxl4byZrNLpXSgxZk1Xqm99G9wjR9XsSpTyM460Q5Eh7NYv4xUfOVlBARtE5fc-yPUJrMozA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_es&type=PROGRAM&Expires=1473655240&Signature=I1gzSec8SLd7z3lvfTqQb52BduQsKYMMNvPdEw-BQTFr9Uz8vWQM343uibPSu00mJi2R-cwirkmhjceT1hhLCn4MG1-giiEGT5WZwk1l06ui04lH5ThFxWQgY7wMO~PIoQF-giA-k9wotSIVOuqfD44fKXrTqtKeO-5o8oetqCk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_en&type=PROGRAM&Expires=1467552387&Signature=CzXiVFVSi2sx~1747NQLl0q06k2uU3hcN1aWlsjE51JW5QPYSKRGAXw3VSH08iK26QxhCceTbivz8ray-fd7z0vFf8wMm9nNj-4zuvwXF92B2Q5hdK3AwAUFJBg7ISjNtSCqR6v2e7kn0S4pUE4fN4o9cwPWZL5OlNj-nGdeGyQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1478123548&Signature=Ey09zdSvTF0D9OfZ0~v4mahRcgSCyI3F0emutiAsfI4069eRNczPljmTvc6KUTMU00Q8b06-AFayCdn16oz2~UJ87nawdEtjTeRCg1ABVFLCnBEOeGW3SedAliJ265AF115yKEIYzgFuCT8typz8j0uSbTmYYao15dKQbT6cak4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_en&type=PROGRAM&Expires=1477621053&Signature=Zh8nKkRfeIz-bXo81eYei~TYH9Whr1U0Lv447AdpCcCQ4EM7VKN-kAemvxofMoP6gVy3Qzm8hLEYNU5aCQwOyZEjHvzm3IyLA9lVbvo7Jo1u4qi26lselMOP0pY9nYxL~uq8qKK-EgC3Ktmlq~Uz45ZrSb8XELBzedQ7YIwDR~s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1480221315&Signature=Ue1TSX9meosD9XJGJ38bEWPFLlJ50FZ7aGNXJgsQ9uNgCXETqnm2NvXwzUTfvhVLEJMGeSUASZkARWO8AhzYskx2V11uTaiREIhqd9GSieihARlyfIN29eWexkOSd1ULSMXZD-l5a41VTHUXkzpuYTlv11WBm~8DrGyEeJXLCbo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1480105369&Signature=Wb9vL8nU~FBcq8kMZsrvfHwD-qoI2dHCM1nZq0rtbr1oOmO5DznsgmE~jmGJMdizlCVqKCezI5G6n9pmXf4xXeJyizFyFzNENyiAO2S9qft4FBZ-W3siZRKgLe97YeRSJj1Rp0UweWc7G8bf9yZsotxzLPcoKV47CwWgjaxHAlw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1476066206&Signature=gjndMYQd0yyEMVNCgGZJVvxBUTs62GOdIsp07e8xxD0UAWVIQwdiMVZqPUQAfoicCcWAQ~NM7sRv1-aWS8SlE159cPoFY5JMLa4~HU5EjtjqlUC7RcrIaEsrUyt1UuW1y6PFyhIbG2lvJ6LJd1ByodZpurYOSbAfJpy8PhnRI9A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1479828956&Signature=UqdSGTtLDEdT8kUdqAzIk39Z~Joe-J2T2sw1g~qaixcZhPaBQfyESomJNazBZ2ngxLbyb1hr8w9yk0VN7lrxLHqxniRlgUW~vtRnNGBKP5BbD5YYOAcCp6JBGX8XSRP4E-iupl8TlUAhRwPFzPI3~v4zlSS2DAfBBjUN7aX-pnM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1470120894&Signature=BOSqkFJTFr6ll2dONmaFXUliS-6~hCgCcyq0f5XHUpzmMXLsedK~r72I99RO93rPf2U696iS91ex3lNUAg6sEome2JzBVqVgN2VnCltJsqPgFDj9wG3ZTpkoiI8hsjxo59866ss6mwD-xzY1HJGGG-K17QL9AhFf6xpZP8yp9KE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1456316289&Signature=Of2Xl2rWdsepVI1fPliMe6jJM4atLxSba4K6dLsAKJ1POPqJNdzYdVfdWliG3LIKwDheUfWkTh8BiGMQaVZJqXgJD3rW03uQc6srOfXz5SrdFaf3aPkBcqqf63-eBpHZNAUvNinO-vPBSW8P8QwkSkfnAMxVuolP8R61vizNsmU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1447486575&Signature=AU2XQELbDUYkyUFMa9N9-Y34RPreKH2Xe59fPYIjXb-gz206vW-QYrmCE2sKtODzB3znMSB6vAlEOuzAW3UhWsOq3Ncyk3-yY-Heq8qzwCZ3O333QBMN8I2BwaFmCqUS-AtOilih6HqoHYXa1jPr4-rQ7ZLVIU~bxiLZj1DbDEo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_es&type=PROGRAM&Expires=1475694829&Signature=Vr3tEvNt9XX9lkFcUnI3krhzbjUOBFtimhAxXg1vGLcOIENf9qtCQRUnve2Y~EqbWdFTcFJAZ2C0Pwg3tXnvBlnJLIVqO8ep6pVJbUA2xxOiSwtxJRBKIljR6N~7~nnIjMLFIRGK2VPZIR-cd~M4fTNXDlJjy41xIxAXog8uGEE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1459339175&Signature=Mksv1okIURarsKdSTQuu5fSTwLSUeBHTa17peF8idkw3nwfSMueIzyVClBopmQ4cqVifYnJUl3b8yAV76YdJSvTF7sDbLfDl0SYvqT9B3DgOqKNy~WkcweRcSIsu9Wqagh3l3XnoQAIOVgO2bY2Lm3YGkoyZHfIR9UcIqvyTKGU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_fr&type=PROGRAM&Expires=1472298740&Signature=TcXQDRsJZW4m7G32qml4WUoc5p50S5e08-gISXZ2JOz0YNYqnAVJYKk2GyHIcHxGjAeITcUf18n5xOBii-uXAoWetgSyBx4L7ap6hkMlQfyv-36WLD5CLWQ6kKSXlbrKt0xWOzuQHmAlx6vzXw-dV4tLQnQ2w47iGVRYzfvo6X4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_en&type=PROGRAM&Expires=1469003824&Signature=FowiRQm2kH9-JKVyZNHkDkqTSOATUZmILEpcnEIkkNhRIWf0gxl5MZJLkaMS2JjZtevOOHvgacnZRNEuStqD1VJ-zOTjspsKEiaF395cljGmLAEMYpPP~A1chcdlY-4Myhbd3rV6AEmO8Nh6oTM~9U9KrVVuVc9dvMeqhcHQl7g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1456106725&Signature=cGy6yDTzOw6qe7-9hl7ebluFIdjZD0LD6cjzaMp92~sMVrMxdmHRQY~z8M2S3xGP73126ujli3c5RanwqIQqFMUvylV9MAgYAHf7tiYWQQWJ8VqSgLyVWadDVUVcDKiZb6pl~IzD2zOsYFfAmHvhGGP89-APUiQ1zLuLC~RH5v0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_en&type=PROGRAM&Expires=1459375126&Signature=QLVOFV03iX2cgMvrzA8v5JjLHC2iXmaLlHSVE9otuagi7LE8QkQgIBVCQdmbjISnwYm103ZSLQgEtEqja5LFy844MpKjo0TmR33x1W0oFVYLpDrfQYphl-tn9plm~llxsE7lplF1S1FXUWcUd6OU6p2uz7HmCJ3Pf~1tSoI6NvA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1468073524&Signature=bbsI9y~9KTiEiqOVRWAlZF-ugADrNZicb~d5gpm11sWXxZG24xLc-LT1ifAH4ILc6ixgYD7YA7SRdUIXgFn7-T~latKukU8pbr8k92q5AJU43PtT5eODNbFCyubGSx4VcCrQ~PDIU7SsKVehk9By3v~tfQLoyCcAu9IihaOsWaw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1448424053&Signature=YZfJwMtHUoTihDwctVwu26cZtLv1FX69jaqh4sSP-GbJQeIQIPBzgEGZ9v0M-RwSP5FOjuk8EfexFViSEnkcfS-8vl0ROpgMUXTI3eFz14NFYapmcjRK1LY7-zf5~8lGo-KdmY924ZMRfyvc7ilPwDOhCUbcZEFtOiZQjBKKGtE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1448440106&Signature=aJHGE2E~-~2m4ZoF6tfCYlhq56kY5B0-lWONOrl-PudAafDbVBUdOkrqk5WfGouTd~wH3ucpuGi6vukINdsM3N6heQvts2KWyrfAcivbcIrp6l1zSVje1i9KAfimlkLgaUGsG3IS5Qy7wvE~U9zXM963XQTEJT4u35gJoIVkFOs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1465722345&Signature=aYtqiSyMTDUVbM0qsQ3FzyN3pgqQnTRqvclbeJPyCG7gzahs2ofpSpfGDjHlL1RMelHQVlDsYMBOK4IGtTAUmNVwHSvlfjkOQi3A3Ziou6vX1WsIZuhUt-o8IS0QwC76RKYtZ9eb8Pojqt6rHhpb5E2RtSwlItAePViIbKJLIQI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1463503032&Signature=h6h5QZl8GYCTx2jFNegUaDr4uMqRHDRCiK--WLrdvNqHc0BGov1nS6YIGBL1PJo8sPt07ulWd77mui7aP9fBTSi1Vc30OvxXANoCadA7cBR~FtDgsuWPPF8RY99qQ3uPbygyqPaTq4lt0Wn-NllrbmFgvrkB0-X4qbdNxGjxFII_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1461914701&Signature=dhZBzJ0GC5j3hKc3hjG6t0d61ZuFOQMerkVN73oDfzZZcK3QFagU1TdnbaoAjK4D08vCTrMPmQkf6UkoBjzHaTa6EDPhN2qrXQio~-Jc4DgpZSsBAoPIjc-B36P4TSDu~jCo9JH4qakTBlKBZl7OW6S5ZClykBe1ySNr8-4gqKw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_es&type=PROGRAM&Expires=1460917371&Signature=Gz-bBXXXQBTx4i9PBSpbZdZyrcWvCHRxfQxele-HVmR3sx9ATLlAo-XNXK9vetPHLfZ32ToFV~lVpn7oOXcrnsWOcUSzT7VKnR-i~8xCxf2hjiS8L32yFJ9D1FVJtoNuBvwZCWD-rNAFD9INerKXVs0lppJlHtcq-KQjMQ20SkM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

http://gsf-cf.softonic.com/5be/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=68753&instance=softonic_br&type=PROGRAM&Expires=1459832747&Signature=gXaHeJGzkB2ow05yK1VDRLLWFPNsHZCtgmiMpDgexzUrmqLOa6yB4rgpDdS61VVYFKF4rimk5pvCzteDzOqt0eE5RLqmhEFG9sNEGGMseXSBC7X45VLGX5hxAyq~vLZLAyjiC14zREScXyCMExkpyKRRq8DA~rsHwozaeXNuNNg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=GrandChase_Install.exe

Latest 30 of 46 download URLs

Scan grandchase_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.