home

nl_2010_pro.exe

Locktime Software s.r.o.

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Locktime Software s.r.o.  (signed and verified)

MD5:
64305e7a810bc4483af9dfd10562cfec

SHA-1:
42ba7bf517fb08e051bae43849fa7b8fff2d3890

SHA-256:
6a3c0d0904eacdd7bc606dcc13b433b3cf8494f4c4ecb3223997566cbeba2ba5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:34:24 AM UTC  (today)

File size:
2.6 MB (2,713,616 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Locktime Software s.r.o.

Authority:
GlobalSign nv-sa

Valid from:
3/29/2007 10:32:24 PM

Valid to:
3/29/2010 10:32:24 PM

Subject:
E=support@netlimiter.com, CN=Locktime Software s.r.o., O=Locktime Software s.r.o., C=CZ

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001119D933D10

File PE Metadata
Compilation timestamp:
4/1/2007 1:39:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:MGYN6/uWt0fHsGYIIRTQyu26EQd/ttY8//DhfkGTg8b3B+m+6K:MRWQoTIwMbZ/xNghm+6K

Entry address:
0x32D0

Entry point:
55, 8B, EC, 81, EC, 80, 01, 00, 00, 53, 56, 33, DB, 57, 89, 5D, F4, C7, 45, F8, 70, 91, 40, 00, 89, 5D, FC, C6, 45, EC, 20, FF, 15, 30, 70, 40, 00, 53, FF, 15, 70, 72, 40, 00, A3, F0, 43, 42, 00, 53, 8D, 85, 80, FE, FF, FF, 68, 60, 01, 00, 00, 50, 53, 68, 00, F9, 41, 00, FF, 15, 54, 71, 40, 00, 68, 88, 92, 40, 00, 68, 40, 3B, 42, 00, E8, 06, 28, 00, 00, FF, 15, B4, 70, 40, 00, BE, 00, A0, 42, 00, 50, 56, E8, F4, 27, 00, 00, 53, FF, 15, 08, 71, 40, 00, 80, 3D, 00, A0, 42, 00, 22, A3, 40, 43, 42, 00, 8B, C6...
 
[+]

Entropy:
7.9979

Developed / compiled with:
Microsoft Visual C++

Code size:
22.5 KB (23,040 bytes)

The file nl_2010_pro.exe has been seen being distributed by the following 7 URLs.

http://gsf-cf.softonic.com/42b/a7b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28916&instance=softonic_es&type=PROGRAM&Expires=1477993656&Signature=aV1A~Gi8Cle58tgfHOYOnqqnmBlNeroAQhm1q7~9FfVWv3PHAoD4jT3i0urUxt-ecYL7xKNJQ36oJJdqrVjJcquMFNd15~I~GZS2z4V81i~T~pbAWp0EwDcKM42brKDXDDpfLek5-8zlndgLPaG-CI20qMjClAAE0lwXwvImGnc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nl_2010_pro.exe

http://gsf-cf.softonic.com/42b/a7b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28916&instance=softonic_es&type=PROGRAM&Expires=1476271322&Signature=W0OxzNdrklfMvGi8bKowCITG~IuJY~FFZ75OhFlYXpaxUSdU4GSoAweeLgK5fbBSWG1FA2rbiczBFEOQeF6cJmVx-75Srzhu8HgdposFf34JnVYRcVVDGiIzVeJwR1Re47Yg-oswbdRIGv~qYLvtsuJmUK3dd44jd5VMSHUPLmA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nl_2010_pro.exe

http://gsf-cf.softonic.com/42b/a7b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28916&instance=softonic_es&type=PROGRAM&Expires=1460700904&Signature=HVv5i6RLZN-5gssC5Ejy3gBGJD74xvl5CqPH7BE-g4VnSr1xyNOZXn3YI5X7~7AKFvxw102Ez4iXluGSLgCW3iLVRgnlOnebJyIIF-uIFRWUx-YjIF7eDE8uJ~4gkTVdT8vuPDRPtEO6lw5ZnD7Mzodq6DllBYoxFPkA7jx3IU8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nl_2010_pro.exe

http://gsf-cf.softonic.com/42b/a7b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28916&instance=softonic_es&type=PROGRAM&Expires=1446484793&Signature=POH59~IwqQZkBOl8HJlZlG7LwcBaxIsoVd-qFvuxSsfIzyzEnWEuMho8r29kK9jGyU8LPEDDEeHFORlY3ti2yGEY74SEP3Y2d1uqTVlSpAPyfay-Soq99h9q6df6Gwen2NNIgcN3NNcurevq3eI0AEfszkMXUD~ZsZFnZLCGERI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nl_2010_pro.exe

http://gsf-cf.softonic.com/42b/a7b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28916&instance=softonic_es&type=PROGRAM&Expires=1458463854&Signature=MP5juLBGn4jI7o6cBXF8GZkWwUKX2Bd87yvm-cg3feojwCVVKUKtDXHXD-WHhHFcagBUy3qZI5Mprll7ZRkSwGOQ8Nw7RmEfX5Ygg82trjsq~VOGC8NziNhHgEo1OZoXMwl2Bs~XTeqjvoihB9HV~dIXZOQPhzEg5PgRPX9AZH4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nl_2010_pro.exe

http://gsf-cf.softonic.com/42b/a7b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28916&instance=softonic_en&type=PROGRAM&Expires=1447645090&Signature=SOlUjGt4X3L0Db8OrlteN4BqsIo8WniKkQUG5UUThvhiRUTD93MS6kTjWaS0f~X8BkpmGVT4xe-SzYyqURfOcCaIDpQYHwsGwKaMFwchFym7VfQSRranrQmXs3sivvjE8INf9iCUylxbsJxkwov5FcuCCFwLshfN3vKB6Gavml8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nl_2010_pro.exe

http://gsf-cf.softonic.com/42b/a7b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28916&instance=softonic_en&type=PROGRAM&Expires=1438455253&Signature=DUFrvqG5L5Sx8JEljGDdLf-mxKS7B3zPbpa1PEgifwTXFZ8QDuVneJNj4ys7QA9j2XXaUC8R5BgKCBbwiszhjQG4bfDozDqxaDZ058W3ffKc8xFxkXGOPhK1SGTkPD7aO1H-6wxQUaKsfSacBr70jxrTE0--VObaBSJ5i6W4S28_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=nl_2010_pro.exe

Scan nl_2010_pro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.