home

orbitum_setup.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
0044f7515ebfae5ce0722923f3cbbd3e

SHA-1:
d61628eb5e81a961194a57861e89b8d0cd9dfb82

SHA-256:
3001b290acfd4becb101e1c7cc2d9a1a413ca3eb4337bd41e96e21f753a4e2a0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/14/2024 5:09:47 PM UTC  (today)

File size:
148.4 KB (152,000 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\orbitum_setup.exe

File PE Metadata
Compilation timestamp:
12/6/2009 5:50:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:3gXdZt9P6D3XJk0pSAXe0ON6tOAC2fNaxiPP5mDBr4z1rRIa5KX:3e34K0pSiXO2IcPM+hUX

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file orbitum_setup.exe has been seen being distributed by the following 34 URLs.

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1477802733&Signature=DEdOrvz5qfI7rDveu4SRH5J5Ijk~3SRaXsDw17jZV~K~D~LuMdk15DjrLHt5k0iShuyiTbZAt289QxMPutK0R8UyRgbRRJxhwk4AB4iNYAt~1a~Z37OGedE5XK3w~EoAOBIHq8nI8ERGzpbSw95q6NlW89tNal49AHK4vuwZVbs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://global-shared-files-l3.softonic.com/d61/628/.../file?nvb=20150102111417&nva=20150102231517&token=03e0b5b82f4228f970629&channel=WEB_SD&fdh=no&id_file=69655319&instance=sd_client_en&type=PROGRAM&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1476099097&Signature=ZIbZnGo4kcJQ6Y6eroDn9pTe0u3hkO7HzynI~-hMdcV0JKHasT7nPDijhI9KfUk58MjGOucv8abYe0YY3gkdhHdu4iXuX9NxT-3SHJyV16lCql3qGLQ2J5NVdovKTuhojVL96odlEkM5KCA6ANhug7hxWUOyfPo643-sAkKKrMQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1476408795&Signature=BUxalgxNIlD72FU1aI7YjH01Um2mEyABasJJ3BB5CAvqCmj0n5~3BkSikKlGFIGwXV~sOkh0IL-XbE7LjHqNAcZW~J19iht3h~Om-~1eNtZ5gxqzw9N-i2duFqAQ6QAiP1vaqXYgN1patnn-rJMDGAgAEUt9JJlbozGQqHbJT5M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1476995205&Signature=XIVBPZyTvXexgqPPFuIA0-OGd-tqwmaTnt4mQk3F7IC7hKtqY1BnyZ3IprE5uoMBGGk~wmhfKN4LLdIMF6pw2f1OKPJJ-V-gA0uaIcEdYMxJ0uyZafvL9o2XT~shM3LC9ioMmbQYioaS0N3XaGsZvEnzr64hy2ACo5tfbzx3ogI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1481012999&Signature=RjtFuH39-76R~kH3nluOgh7Ge1b6GVKHKD9~SUpHX3epH4de6XRPG47VKMBAb1pKUCwh7fPpSUV1PDA1OOdMZ1-LU9Sg1W8QGW8Qg5nV8VEQUxh2CYTmDXhYsWZctptGv1hdtBdNu7jGdbFYVnL2cUmR4Nhkg6KSF50bFX0pXZU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://www.epfindia.gov.in/site_docs/PDFs/EReturnPDFs/.../setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1444269636&Signature=XnHxxNHYhfjb4mzbxWRdoqB2ZlwmTVtJ~cWrNeNmGBd4QLacjlGqZlsFBeMeZRX-kMGtprag7IvIUV1WHTXE~ksoE~Hf1MbZD9cN-WTtWCvE7EAXcTxJ9U~oanL29wGVDkSNvSZgFxmYPxWMrlyuKJmPwVI5R7vQYEVi5j0jKmE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1465574076&Signature=E-tL63-~iWIT-gTsn8URXX0Kut8zcO1YcsqzVCcN5r7mYJf50rBJUGikPGvuWZ9dCGgitS2Q8MGHDdDmqzcfPYGSV2Yc8MXwAIT55ZbbQf8PoJcRlmrPLqHm5SiLx7Whpve6D4YMHirq2fSCkv7zgTUST7Jo9qS5PWYf2IGqP1s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1480458301&Signature=LLx4vaJRkjRe3C-U3jIwUmr3Mj~c~OzkT47ZNbB22NnovxF2wKhEyRX97-JcSFei9m4cBWMRkdLwevode~41xv4vtqesetoy9PpPHtaOkVpITHKm1JaJoTlfP0C2ehELqQfEvQR-ZF-dI4SNDUmAGpfSG3jK4iP76-faxOfav7A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1477727182&Signature=NrCA4XW~~3SOna73NJcA8bSbzKgkbUxSbtPsKoSV-uXEAZ8q~djgv8acwrXOK55u5a4WPbAvGPwI8iT5luTzp5SLwHfRzouE2nAMdzaDTCXvHjI3VanuPf8yMTadLGdtRg2ji-XsLfaPsZE2GwU6xvT15Lt4920mxo-H5wVLZFs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1476334835&Signature=cwYm6eYt8qxxzcjtpQbiVIwaoOGs15Oi-bdwpdv6eG3cWdkxHAiOQrCAdIOQYJOwvpNb38t7E~H0NpjyDUWLRyt3cO~oql7ke3SBcvSt4zpizByH6H51vyc5b7T31TwRXsnjN7Vk1j5o~C6UZeCyMQbrH4KV2RFAcCqLjfKcvtg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1477276048&Signature=QzTlSsWta4Bv4ftrx8MIbHHeWNEAaOnNexQrYdU4p3XjNIG~TQ9bH-XtmsGe8HUpLagXFXhCy1WPaPngony0frc8oRwm3DXYOC3eHMGtfcJstyRVCOvLaqiBBxhU4O2tm-yCedRGZ6qKysfwZHuys~Md4h-OvffSotEh73UMjn8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1474968957&Signature=fmutuchB2Rv4clbUxbQoNLeVrMdehQgR-83jHPr5G9pCRX-C-Im35DvpKMcN5vcmYwqgjXB9jJDATcCJf9gHhpFDpp2cD7aH7bUBVcldEtJG5VlW9yHkmsDfxW9RV9-DRKRTkV1ti3vHyOokAN2BLfvdNvcoH3qGCNLJhxVdLT4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1435828945&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=SaAjtnpGTdr0svJe8ds4L9xuRsTQdpW-d4dBNCHCaOtc40i4rV~QGnqUw5HrUsVCrAFaJHh8w75mmrErr2wjJBRFsAZ2wfGM3XRwbYVzH9AbDXNmtGQtwHEVZr9b20KdfSC5IjHEheapabZ2DBLB-gVXCbgYQyuw1844TZli5CM_&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_br&type=PROGRAM&Expires=1477271069&Signature=LP7202hJzUrm2uu5pwdxuBQA63i3Sn1RxGQ0jRpp68DgXhaoiZq1rdkUQ~TWyhyW97ZBqQA481~SVEEHMep7jBtfiVyj3FKYNXFbVsi7usvji8F4fTOqXLI1ume5V6SHAuutOxGx7rm0LXbISBMC1zGDKvPQNFyraKiVvE6m6xU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1470366031&Signature=WsI9LB2kmuTdBu9YZ1eC-Ta3rvtbVjOVE725SNA5RInTlJQpFcUEOkmcQkwbkqO~rYFYwSd~zJmFW1-OA~HKHAl~bWhB3Dwu-tw7XJNQL3vjM9GoTEYL9eC7t8PTrTxd-aEdL4GivXdaaj7jdbVPDVy79gEgOHS6fJ1bQWyw6hI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://downloads.installationsafe.net/Download/DownloadContent/a6a2bd0b3324445da8bb5e972419f8a7?ag_domain=safeinstalls.technology&ag_originalUrl=http://.../jre-7u51-windows-i586.zip&ag_source=65886&ag_customParameters= &ag_campaign=44437&ag_action=63659-26_2875&ag_medium=ron&ag_channel=bb_adv&ag_postback=1404500015092_1404499996649_118_394_55695076_1&ag_filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1462652703&Signature=OimgMABi3z~DBuAeJAVEyVSdWo1AZ~OISLt3b0iKzfKLdXyJ7EKNqn4ffAT5lGhCBqEFEpI5oEuS7cgUEs68UwJO3flS-1C0vQCU7ww-lVh5k~ddnLJoiALLTMpojq7WHdryY-IeO3porohY9uZGB1dy3F1sfmEP02NJXGQrtQ0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1467818574&Signature=XD8rQ2MiEXk3nVId5G1gj0Je0KgLYf~Q7av30LRk1Joo5V9Z2LuIRae43MDQh5icQl2i0o59nJ7Qr1kBtCQaf69kwHHxQa5cQwdcEcpnUtndV~VpYv2PvUpWhZ5Am9mUZ9kVxo0YvFMtCjbJVy48ZoRs~PjeRqDhw3pa9AKwBXo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1476057376&Signature=YXka7ETEIRAp8jb-OPWCb8vQ52Z-5zhaeJswHCXx0f0RHvEQvfqb30uEV20ZlqVlbJYmP8h1-RvyV4aRL3nqLs8-T6W61E1elnsc-qrsZ0wFOqi2uUjQN2u5tGxv4797-sNYsapsGdfJ4iPunhMyvMcnC3lbpARYt1GqJ90SSec_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1448168758&Signature=BDSRMKi2duVwaHd~KIMx87jCUFOmCquzny8-54OSp~RgCeAyajjiX0tKq64nVmfdKbsAn7Tr1t6Ruz2EBA7PxnQfxjutG0CmSiMxfNmgWoyT4FKtoGJdO0ZBnwJm6US2e~n-NNV~JP5Dfv39bF4KWjlytyPMq7WL9sIR9THfr9U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1448236052&Signature=Bl4TOjwfH1EO7l9-5N2a~fy-0Lk~Dgzr5~msVFmDJah7kZ4Af7BCIhIUQlNlTL3c7s3SVw~Or8QaaGxt1zbK7KTFKq74BZhncR1Z4Wr-ePIRY~b3MHwjp7nF-tJMKwNXKLOskAwJRxSwgnJkzwFsZlnHKj9zXNYHs810FOffPEI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1465564561&Signature=PnfkmcXI10N6K3zxUqQxeVgBOR5i5MvUEqQPnDGMctZ3iugsGk3188ZfpPUtKlr0LSUcj~L2OzCAmUHLstzKYMb78B-nEA93--EhmfU8gaff9DPVKg3AkOE3aBWcmb5QBnnzQuPQyTLj~XmSWKkXfZqDetW0YqLTqR3KSze~tsk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1465837426&Signature=bgW8OYJoYJ4OPTEkbE8QHAeXwRXfDYTy4gO6VwpgRJ1uXv9lasblOTONmQG0s22aOygRgIzFPAB0ATM4fSK4os51PUfckcdnDJao4oysCgBkqyH8Un-8~335o-3DO59s1NAElwRR59KqWbtD7L1m4iYLA0O4wKJatwOKYOFjb1c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1458904525&Signature=hUtSxc9e8eYGxowCu9OIflB8ZpasVJr8K70xGZnJqs0jXSyqPcfRz0tSzDiSheKClsJ9QAYXgRUHcLhc4T4cpGFKeEjJgiWBJdBVBa1e5Q5sasZgsDeleWKVB5LPqc8trPKkCx7-RUVwipP26FlO6s4lWEGCm5Ulh9xNxQkIM4M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1450318459&Signature=eaP~VwuSkJeeaAfII0BBxL-y8fCKNxCiz31Y0GzpHRnet-G5zA2IgR7~UKCNhbCpXDh3c5PjPdWsBRDc1QFBOO~c-hIi7EPd-eLzdD0IROLsb-6EH7PK~t7ip445Cih2329neTVnjR1~DIzjtmzWtM5piayABtOq4WDKA7fH6jo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1435277282&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=BjnwvwxDpniXifqC94N3vsnSp7cayZBB6fKmtKofC8Xyazt7GEvQ8xPS6fClDJoY2KjKGLE-wg7Noklk0FYmyiBVRjN95Uoj6Jf2kwl-NEvzjDKJNc2ShfNV4Ou~1s6UAPJWJXxTOwHJuPMXtmF7rWkt7OkHFtumUV5p6f1ckIY_&filename=setup.exe

http://www.freeadvice.ru/.../orbitum_setup.exe

http://gsf-cf.softonic.com/d61/628/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655319&instance=softonic_en&type=PROGRAM&Expires=1454130870&Signature=C5uq94OJ7GNsC7Ync8ZKsq4Rk1~kBJwtfh0iyOej6-qm8RmfYoQW7tAqkKONWXEbZEXkU9GOsg8d-YllG6dStji7wPwFwSZnuUXNT693ZaWnxWTXxo8lt59KLk79Apb0X1aANloCR70~Sc7YhKYn6FO6MGNLQFohk1nSMas7ngs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

Latest 30 of 34 download URLs

Scan orbitum_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.