home

pf7-setup-fr-7.2.1.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from telechargement1.pcastuces.com and multiple other hosts.
MD5:
ce3d160c9ef487d6b4fa93e9bbbe8088

SHA-1:
980871b61488ea8b0b500c4faf4987de0dcedb66

SHA-256:
4a9dda05c06621e853c3b45eb1e1adc352005502d993824ed20a585208151b95

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 2:47:05 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
Suspicious_GEN.F47V0301
7.2.75

File size:
5 MB (5,202,180 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\pf7-setup-fr-7.2.1.exe

File PE Metadata
Compilation timestamp:
6/6/2009 11:41:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:bdUyT4TPwTNJV054c+rU59niNqOcAtVdFK6l5xgX3lq8LGQ5iIKV6h0oLU/:bdZETYjjAqeAtB5iqF/E0oLg

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file pf7-setup-fr-7.2.1.exe has been discovered within the following program.

MyHarmony  by Logitech Inc.
3% remove it
 
Powered by Should I Remove It?

The file pf7-setup-fr-7.2.1.exe has been seen being distributed by the following 19 URLs.

http://telechargement1.pcastuces.com/.../pf7-setup-fr-7.2.1.exe

https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-CosHQRVIyCNgvRM_eMp7ZxiZDhvK_eewpYbL9xwmK7GRjUqOnydBPu2A9aQN3ION/messages/@.id==ANFLyAoAADd6WBACNAoOODrZ-sA/content/parts/@.id==2/raw?appid=YahooMailNeo&token=zitEzqOML3j84e6ealFTT5U7-km5qEQF52lp7AcCuBaGdqomiYSQ9RnQp0zh8KwlEDZhXxljWA3_PON_l-UmYXYUq81OKbLGVUQgg8_64KAGYHG5zZROOYeWZBW-NzAx&error=https://fr-mg42.mail.yahoo.com/.../iframemsg?id=ae0a7656-e838-01ae-cb8c-d8ca653bf070&ymreqid=cc9c571c-249b-e3c3-01a3-6a0033010000

http://dl-vip.browser.baidu.com/.../Spark_Setup_all.exe

http://telechargement2.pcastuces.com/temp6bs2/.../pf7-setup-fr-7.2.1.exe

http://telechargement1.pcastuces.com/temp6bs2/.../pf7-setup-fr-7.2.1.exe

https://lc.cx/4NUh

http://telechargement5.pcastuces.com/temp6bs2/.../pf7-setup-fr-7.2.1.exe

http://telechargement1.pcastuces.com/temp6bs2/.../pf7-setup-fr-7.2.1.exe

temp:photofiltre-84-jetelecharge.exe

http://www.jetelecharge.com/.../gop.php?id=84&c=9WZXlKaGJHY2lPaUFpU0ZNeU5UWWlMQ0owZVhBaU9pQWlTbGRVSW4wPS5leUpwSWpvZ0lqZzJMakU1TkM0eU1qRXVNVFExSWl3aVpTSTZJQ0l4TkRjek56VTBOamc0SW4wPS5NNldFRFhRakZSS2kzbDJpdWNrV0RnSHVmNFhHS3RRSS9KQ0xDWG8zTHBZPQDRZ

https://download.gg/download-9462923-pf7-setup-fr-7-2-1-exe

http://telechargement2.pcastuces.com/temp6bs2/.../pf7-setup-fr-7.2.1.exe

http://forumscnetfrance.digidip.net/visit?url=http://static.infomaniak.ch/photofiltre/utils/pf7/pf7-setup-fr-7.2.1.exe&ppref=http://forums.cnetfrance.fr/topic/.../

http://e-campus2.uvsq.fr/Members/arnacout/Fichiers/pf7-setup-fr-7-2-1.exe/.../file

http://telechargement1.pcastuces.com/temp6bs2/.../pf7-setup-fr-7.2.1.exe

http://photofiltre.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANs2rDG86M7OZm0W2c 1FX8vGiFSwHUDQ7ZR3fNcX5WD3D3apw4QpB4NB/.../VC6DEMfhcVFTlJokYiWeHqIEC8ETf9mLQWAc8oQda0XoQxTIMoroprFoTwNke3hHt1IJIZVDtrg==

http://ec.ccm2.net/www.commentcamarche.net/download/.../pf7-setup-fr-7.2.1.exe

http://gsf-cf.softonic.com/980/871/.../pf7-setup-fr-7-2-1.exe

http://static.infomaniak.ch/photofiltre/utils/.../pf7-setup-fr-7.2.1.exe

Scan pf7-setup-fr-7.2.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.