home

pc-wizard_2010.1.961-setup.exe

PC Wizard 2010

CPUID

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
CPUID

Product:
PC Wizard 2010

Description:
PC Wizard 2010 Setup

Version:
2010.1.96

MD5:
6e86153b72351253bd50843e42583965

SHA-1:
49748b679406298b17175b0f7bd34feff183733f

SHA-256:
257706acc53a225aa4f665d8152182d05e5a771251c6caaab780002c667cd95c

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/27/2024 9:25:56 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Kryptik
7.1.1

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
8.9558

File size:
5 MB (5,268,749 bytes)

Product version:
2010.1.96

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:xakOJfWCE6YpHN8YMdDPibCQ78kwRJ8n5aTiOhTZTqa:RQpWvMtPqCQwN7Iei0ZD

Entry address:
0x9B60

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, F0, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, F0, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pc-wizard_2010.1.961-setup.exe has been seen being distributed by the following 14 URLs.

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_fr&type=PROGRAM&Expires=1448425007&Signature=iFoqrBna5sBA6zE9jzIYs-zxDbfXWbDdIvu7jwk12zZHMXgNwvm82O5nseRJ4qGwLOXQyWk8QBMWFYwj9hljDmwrLmrck4Fr4hkbXCzShhFPv3gXkD97eJnsBo~CJ3FLUg7-vrbxM4grxVk5gJGnqpEiqKrxKbcro4hph~arDHM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.961-setup.exe

http://s5897.chomikuj.pl/File.aspx?e=yc4v-2xMfuOlHa8sROztFneDLeRILxh4-pI_GAq7W0_EWZEP3KWY3emvmoT96iT1gevLDTCYH-hbvDEnyBoPadPTwVGjAX37Q4174WdJQ91GrxNOL3C0EKGon68aUfB1T8xzatGsySoNNEItx2O3bL6omZhg1Hw6Xc1BOLkZ4u8&pv=2

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_it&type=PROGRAM&Expires=1480112898&Signature=gOQEffSJbg2q2aUf~VCkIAmLHYldNzuTF3qt2N8~bi6CagLowAPl3eZlx97U3kpAAC8Dx7MaSMXyMTyIPI-UMItqf9yJHoY8n4kO2-n~tbhbJ6Fpwg0NCjZ60xV5elH5LHwnl5H62gvm327Nk2Va54QcGdiSJqqEO9Rxb9oC7jg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.961-setup.exe

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_it&type=PROGRAM&Expires=1480099052&Signature=LaGfo8Q-4giUAlQkzsFhmn02wcbOn7Erljra7ghdjTzecHLh14A6ICkRR1xrKwFbbcCtm33-QZ-pYyWIu8246HX0sSB5wy-VBBaxFMnLEMNwIe-9CAw-TeHYVjKPuKmdxpFby7jCX1afEj5a0okA1UIrPATBDYe8ubok11ZH3F4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.961-setup.exe

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_it&type=PROGRAM&Expires=1475961914&Signature=IqSWh9yQewXpi-RRPPpI5BUyhEMAyROq3Hjd~S9kM6eorjJ9bRqP2lmR48SakICTcuj08Hlelb9ce6LTeqyGbc6Zpb9LYXmLN8U5iuvd0pRKT1ODMO1gHs8Q-yT7b9GptJVoCgwu-Wx6QlMyEGYJL77fNge1~LJK2yv8jcRD0bo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.961-setup.exe

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_fr&type=PROGRAM&Expires=1481094871&Signature=N3D5mA8-I8RyIzBGNG-teirFpVvgJ4-qU6Ghj~CYN47uMhUifCqpNVGBLbsJfteFOs1oAn3GbX436rLhGGnx4rxOYcahe-nT8TmcVUZfyXtncMeJ9uVWnUbdye~dEmCq~QkgwHRJT~q5t0UCWgT5ULHl9o~TL5G8XonjTOrF71w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.961-setup.exe

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_fr&type=PROGRAM&Expires=1462598277&Signature=TiZkfyCtOZv4KXlqSZpxbhHRQuzfbSDYsS-Z3CyKUZG2lcte8uTg4gmLpABTfkc3Pyr1enY0MF7EGeopFDnapldmhGhl3-o~FR0C-JUFvNTgRBJRkUI3JUxP2voxJAWTDeYYlsLapg0eFJqnXuA79LczP5P3IVoHgkWWYp7hjfI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.961-setup.exe

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_fr&type=PROGRAM&Expires=1459316759&Signature=Ub5DODyHDfLubiCVLLu4rNpgy9xRuJ3THTJ5h5Dp8c0s~LUFdjgKF0~5lB3jWIuApdRGdkK9~s6PNI~02~rTHRy-qROIyHMIJ2UNWrG1EW32OZaVaeDDgOFXn-gxrtNcU5RO8JH-C-JBvsGbQgm44bXqdo76~24JX4s2JSH~2-o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.961-setup.exe

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_fr&type=PROGRAM&Expires=1442974441&Signature=Rg5dJbbtByun2EXJhW6BwGiHkG59jjWIcsSGZwVvJUd7LvF4EMRdDcSEt4AX8FHw5HD7Q0HKwzKw0qDUU4xbsWeDNTDs8dG-xPxRwV9hRmWUty7XkQSbBLivOX2WB-V0KdHJ~mo-YsqsKP01JwTfUxJDJnmoKuoKS5d9Qk8~52s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.961-setup.exe

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_fr&type=PROGRAM&Expires=1452820077&Signature=NFsBL2MV~dvVuquEcCGV7FixKjncp2Lv2MFjsSwlKDHLc4lpUKS2s6350PfMN0vD1sNDNG3QzPVrUnBzEGAkCYVOwZ4EjWq9LVpuVTL~Pzgis4vPdAh-34pHVMI0vt6xpQ66odLOE2FBS3E~Q3a8EdMxvgs9JL-N2NHWkT-1aws_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.961-setup.exe

ftp://ftp.cpuid.com/.../pc-wizard_2010.1.961-setup.exe

http://gsf-cf.softonic.com/497/48b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_it&type=PROGRAM&Expires=1424996632&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=PJoBIuZ1uNrmDHOt2qQ5YFAcQDSaK5ZiK8lcs8LrR42BepaIXKZf4CDbAr41gEao7SDcPBUQ9bJnvPJy63t0fSqq4ijqLYoE-Ir5IbyLCJMfU51XoQDfqkexN~cfm0EGXrGfBsoOvVJGibn7qk7FgtS5R7domFPIt-IKU9NcZP8_&filename=pc-wizard_2010.1.961-setup.exe

http://downloads.pcworld.com/pub/new/utilities/.../pc-wizard_2010.1.961-setup.exe

http://downloads.hotdownloads.ru/.../pc-wizard_2010.1.961-setup.exe

Scan pc-wizard_2010.1.961-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.