okayfreedomint_softonic.exe

Steganos Product Downloader 1

Steganos Software GmbH

Publisher:
Steganos Software GmbH  (signed and verified)

Product:
Steganos Product Downloader 1

Description:
Steganos Product Downloader

Version:
1.0.0.10073

MD5:
409788dd0fc0194e1f0f29845c4c5d1a

SHA-1:
88110c49752842ddb9205c392e522baa1c883d22

SHA-256:
91106b23b90404328e38261d961e0f5b975bdca4a812316a173623745c1f2354

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/28/2025 9:09:05 PM UTC  (today)

File size:
2.6 MB (2,689,576 bytes)

Product version:
1.0.0.10073

Copyright:
Copyright (c) 2012 Steganos Software GmbH

Trademarks:
Steganos Product Downloader 1 is a trademark of Steganos Software GmbH

Original file name:
ProductDownloader.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
7/20/2012 3:06:04 PM

Valid to:
10/4/2014 5:55:47 PM

Subject:
E=certificates@steganos.com, CN=Steganos Software GmbH, O=Steganos Software GmbH, L=Berlin, S=Berlin, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11210773A5967178C1193E5D50AC2E137A7A

File PE Metadata
Compilation timestamp:
11/23/2012 3:30:17 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:efZ9CC49d7lxbeE5/tDWdTu/lepMeikeP:efZ9Chls2DWiepMDky

Entry address:
0x16BD46

Entry point:
E8, C4, 1F, 01, 00, E9, 78, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 68, 54, 63, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 68, 54, 63, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Entropy:
6.7306

Code size:
1.7 MB (1,762,816 bytes)

The file okayfreedomint_softonic.exe has been seen being distributed by the following 35 URLs.

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1484217484&Signature=DH3bjxElQHtuXSFpUhotFX9ywxgBrLKwSPVyKHADMHIJP1OSXXpVw28hZwrcN81J33KkS4ue76V3-BMSVANYongOfDdgi~ghAlfT922XDyTiK6gpjLpAC0L8EJ~6EQZVAZtNUc0JDNa62NFdipHjxfRfY23jy9wrhdwz9AKXDU4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1476767209&Signature=PAAif~nvZDky0aEInaNsZ2kbqD5SXTI7xrhzqqb5QFCIYd~mHaWWs10DfoWDh9Pt503SYqCI9lj0Fffr28LaijhswwVBW62hDeKEuTbioOyzrZxTdVVVGjpq-g8sXLVbTqVEHkSwAm1QqZKAocYJwzZj1G4QZy2HhiR1WXMN5sw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1482747885&Signature=YenFCaPJY8n1oFz~35xQHCJ7Htym~PbHuxVdqoPziXDknHXf2QKz9bzOzX4UyURP02THGPMem0ldwQmEN-XHIi4rbmogDWOIj85QUfAhfc9NddWhpCXEB18CdHxzFyJxVBney7bVaQZgHUnxU3Fg5tuzPloGjzOsQfAMM6uhUCE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1477844347&Signature=KLpdGOLk1F5rxk03DcukPunOG~nYIsu05e83azqan~F8T83kyDBZMWsLUdwCq4mm3hww2d-OU-0j5g~95WRcSD06DRNnEY9vxAPhi3SVcx5EnDIonwjqiZ0XlzMpItVyEQnIzjVJG-8wM6k81wI4lW-0oRzB~q1uxyjyy9UpIdM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1476696545&Signature=E5-WQ4h6AMfvCOSozX5jdzDn3kZJpOdmTPR3vw9YTb5vin5b7cVDTx3-BoPkZN1J~8ZNLjaBZzFqUZlO06QweGsNGUkHaTu6nt~5lPZSJeLerVNGrQ-B11~Nb6jmilhe6yLnKkSGHKdwK07yj90eitWgMvHubs6Zb5LgA90qMEA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1476218464&Signature=LhfIXSkJ~ylaqlon0GLse1QFdG9hQ~vbYUf9cUl6CAeXJIaqTJlydIR6vbPAYU9Q5tEkpnMbST1LS8sVPERhMty7xX8OSvoOhm63~f3fxiQfixCxEV2SQAIrCrklmPkovEBtGWsqcaXOquTGwwUGaQuy2P8fTvLBxxWdP2H2mZk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1479074058&Signature=ENiMaghU-65EQG4sq8VyugDiH5Uww7YklwK3VWp4plyGKeAVxxvP0i7SkLnliOpn~PU0rBuKWPzM2L8wQudcXDda4rbZnTT7fw99vshWVEt9sTtPT3Y62sDE53AvtAg~jT6P2CGc6fFdZp80Yb84T6wlbPPV0rX5ku0ResZ5dQw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1479006247&Signature=fOWnQVIedcyNwQoKl5tgA4VKr3I9hBhvG1AIdEe0DrqEOBInmQxVjMNqOBAFmqYxf0NYo44binMJZLvlLtA88JW0OshwVK3iQPvPG45MXdlMCOwJ96BL6Jog1IGaTl~Lwk6Fzx-ykO-Tx6jmC4ot3zuUerVF2h3KspDN4wj7FJ8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://www.clearheartgift.com/8iHyT6zOw6UPp_tV4LtaJtRrs9K686BsTT7DG7Fl2QwDL53T7olmcDgr_R4ZRDSpbGI92vybTl AEVHqKWH7IqW36JPRnw4Jy0r7XHcz0Z1nEF3nf_2Os033tjr9987gohTkD6AjeeUhEVn_sVw4o2liUBKHXQTalw7G Yqcrtzx5JgBaUAKefS1cjZ2pEdOJxnYEFBhP 5 YQg4NGU_07Q2TeZ9VJU3TGAbULFKPFhWQUoKLeonhuCYs4FcTG4Zdzg9TSDTR8Scd8ZyHmAyLhNC1kF8UgAxQlz927L3w8wLWqIjTP2DgXtONwIhugi5Bm5zhD2faitX7rq 9BleTDjGDFkqoQypG3zKWwRtM_eDwGKYWW3tmiTt2rEACC80p9 ie8idMiPRLLt50g5FKjcwfYY7VyzR1K7ch1dDvQe8TxygqIUKhk OKxLuqdGgGzy2r2TtWEMaFUDPV1mMqju39fpjKoFHuiMWVz_glOVWy6w7Pdzw6XNipIdBxJoSa5g4F9hIcShsJUKc5H2mcsyn_Orbbw==-G1IAAGRgnq0tCuzGCRtw4BJRgA1o95VtH8fX61wC_YLTvh_tWtQig46l jPn9tjA7tdJz0vQqj3xXNq1lq6sw5ZJy8S4BqATEJyicJhASQQ=-e

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1476502777&Signature=TYugyExUAJPpDw9gjYKQFYLUXdpkUU9uQdicxcCXZFFbj0aHeBm0JbPIuB5Ac6oGeesjoIy4wo6rEzBZzE6Xl7iNXfr-vm1uodw93RoLc7Eg9X6xNvNqBrSkP4LEgUcRCXMIEKNLxEYW0liW29t5zuD8OQ~N0mOf9Lx6nvJTJh0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1445484218&Signature=fNibB51xUw6fNF6R0XD0MOPEiLaHUnwUJBHIoTcKrSllncEwpT5PtSdPh--EJXDJGX0eFA2roIVAn1E-Ne-m5bJJUWtYfNSpAHzn4ymJRZoBLHwuH8KeCXndJt4IPGpVyGU4P-VeUdsVPEBpSjUwlmrywdSdJ1ZD5CzDycyARss_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1436658445&Signature=PrImLOBIZbmLx-k8DrZEfO7UTunXjkQFJhMrbW~KCwKiGhiEeYknrOgaCkSmVtqHUlPkRewMNpfW0xKGfs80NWFCioFcqPPH7zx9xiBPzn23JlCzqwLG1Rw9HaVAGgCVLuTF72Pdtjh1dUXbfunGnkMHOJmoBzOWX4faXnxjWQ8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

https://okayfreedom.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANWeszXncrxElLkTICkozKBZ6sk0zwO7eHTtaLglGSWh8 029cgYS5/us2YWRclrqFxLAJ1N5VopZPvVdzb uSzHyC46Iwov XgAiFGNBI/.../U8z9xKx5U6WKHQsQYDBUJIi D2Oa4tRYXo8UtYOg8YEbduoIPxCc2Fvw==

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1474508325&Signature=Gw92PQph2drf-dXopW1BV-uUcfIdA4SGplXsURcgpbrkGDt70zcPlp87L9R3GaPMQzdeXh0DcBYBJ0vFI8vwfF995w8yRS41M8EFJl2Pr1h2yz2Qr-3AoPTs5zaOlLvzCMW48NRh0UBbQio4e0BakcuxG7M~HlicU3-JlrFUVFw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

http://gsf-cf.softonic.com/881/10c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3349184&instance=softonic_en&type=PROGRAM&Expires=1472773506&Signature=EkGrjvbidEG0xrH19X-6qTP-D5OSLl-E3qNfLmLsOd-54-m7rbNZqcNFSiaG8zcQH1FbGb8kviTIcQPGhNxVJyffr5gzdPYnB9309XWEFiFxbdqBdq3TizKDTfIn1zt32eXdCi71CTtrUcIij5GSdKmoYBWU5xV8dz-VkRZ~TQY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=okayfreedomint_softonic.exe

Latest 30 of 35 download URLs

Scan okayfreedomint_softonic.exe - Powered by Reason Core Security