home

pf7-setup-fr.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from sitejlr.free.fr and multiple other hosts.
MD5:
ab7a14fec09fc923e1ea3485d6837f2e

SHA-1:
f81cd0071d847c8bdba214e32637e70f87422a78

SHA-256:
eeda06b46c1f88ccc4661de2f8f8737e8f030f3197ccdd7d2563a8a246d5a9aa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 2:10:24 AM UTC  (today)

File size:
5 MB (5,200,936 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\pf7-setup-fr.exe

File PE Metadata
Compilation timestamp:
6/6/2009 11:41:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:C3xZ84/PE8qfc+rU59niNqOcAtVdFK6l5xgX3lq8LGQ5iIKV6h0oLUd:C3Q49qjAqeAtB5iqF/E0oLS

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file pf7-setup-fr.exe has been discovered within the following program.

PhotoFiltre 7  by photofiltre.com
Publisher's description - “PhotoFiltre 7 is a complete image retouching program. It allows you to do simple or advanced adjustments to an image and apply a vast range of filters on it. It is simple and intuitive to use, and has an easy learning curve.”
www.photofiltre-studio.com/pf7-en.htm
About 9% of users remove it
 
Powered by Should I Remove It?

The file pf7-setup-fr.exe has been seen being distributed by the following 19 URLs.

http://sitejlr.free.fr/.../pf7-setup-fr-1.exe

http://lb.cdn.m6web.fr/d/c/a/bef94e383e20f72d8c75595131e97bb3/531129d7/soft/.../photofiltre-version-gratuite-avec-installer_7-1-2_fr_10731.exe

http://d.telechargerhosting.com/?data=Fh4Wm6n4GYqFsq KPDcXHj/0bneRL4N5k6Ivdp9R1WurnNma9UdkCsW51sLbD3SY85JyKtcBsBG/dzzXuu7BCFF0sLS6THBUeFi6PmNxFm7SM3xCKCQu95 kDpBIEGyCSKiyi2m3ns0PMY98Z6LL1cvHhjz1GMsEaNxHWiOsMm2jwHsmnIWWWGWCXvancDmI2N5GwD21BJKMlJcPopjK3S7avzxthfyFERBXuZG/Cfi3SF3QQ2a3XuGcGhXu3xbGs2mzaE2wg9vvN5dJUfXMZ91/aN1yisWfbbNVtgjnIHGQuHiy0 L6wRownSm7kEi3OeMH9LMBz HvwZMGL3X7yKhhtCLjIfcOuvjRKalxd/zV4q5pV3HWQPFVIfgPgQrAjph16RWTgge9o3rCacRvdBN NlL9Sl8HRJnhJ3rjtMmr6Nf0f291 hV9v1O8dWgB5L QZJBC3HkIWRcucEANvpryDgu4JVzPE/vNEOlYkAahr88dThlhrA==&key=k9HicOLUlMKBp85jzjCLjNMVgCiPQoIYmBYc5dbSpf16vrs/Bzc1mKiYvfwsMDtpiIbJY 3/g3r4QCIyLNowIBQy Z0eTgkicWnKLpzdTbr s4y/EXfrhEbUim5AWQqEfuK6xMPDrQfLoHU0O4eSn5vf1Fa5VEmyumANUx8pPHEjVN/RKfry2oplaB8DyRGSRabZwsev5VUFWCFBfprA5zEuvVSpUGJDL361 /dzWHXKxzZg0ZHTDhVBae5nHWDSE hscb TIgBVoAGxjGgn8DlBqzo9NbbySSf0U4uFuTQZx3VKqCsQ0WJ7uEi 7w4bizstaIVXxvB3rLkbYX6xg==&ic_user_id=9257&fallback_url=http://static.infomaniak.ch/photofiltre/utils/.../pf7-setup-fr.exe&js_version=1

http://gsf-cf.softonic.com/f81/cd0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34294&instance=softonic_fr&type=PROGRAM&Expires=1425255518&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=CB6dJ7beNah9icpcCEf4mwGF2x8JRJZp70s3VKSpKsCloQF5BCnTw9hdhs9dAiwj~ZmExa5qrwlbyCA~ZSqQRPBuIVLep3aUXZqNO8e7r8zIflg19QlTojt1Y1U3E~KRqfV-0B-sCjm~v0lNqIGIVN5QCyk4WFI3VrU2k968rcE_&filename=pf7-setup-fr.exe

http://gsf-cf.softonic.com/f81/cd0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34294&instance=softonic_fr&type=PROGRAM&Expires=1425024827&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=AEnIETw7EcbO0o2mNHGzxc646LjVBKbz9DyHfQ9nbVCjXDz9D3LtQ6p2nTlebpkfGT2LVRFf~kNFz1b7gmuqWwwDbt3tyPH~6g6G69p4aha53r4D9-UWM6E0bDY2Vagi0J1jENE-OAQ1CN~Fk67rQvlG5oryin8JQDpEPRSoSH4_&filename=pf7-setup-fr.exe

http://gsf-cf.softonic.com/f81/cd0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34294&instance=softonic_fr&type=PROGRAM&Expires=1425247340&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=DHosBQj-zBgjNXWogFnMYyKbwCbZN9bZ8Hv7sqfxCe9lqN0mGvklhoyrlblVJIudTi0fzGck-Pm8YTvN~zkMTm-b-sh9ENGsoF~dPuLN23ok70dqM-VSAGYfP1CdFzBldTfHgijr2KnCTWqOJ3TTE~-0wrI9pZXR~FzC5ZeRfUU_&filename=pf7-setup-fr.exe

https://www.usherbrooke.ca/moodle2-cours/mod/.../view.php?id=552029

http://gsf-cf.softonic.com/f81/cd0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34294&instance=softonic_fr&type=PROGRAM&Expires=1425628840&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=M5UZOMv73kVxbW2gkD4vjUAqxsg0vaszoCpQaWBWOfK~ddSWwMTssyuKfEZr3xLDf1~NtCIpw5lZ9udDWAaucpK9xpKfpqMKJ5tECTbxqUYiETKPO9426GWND-Z-nmD40G-Mw0mb5f1mYN~gR0V2n6zpW8Pt2XowG1Ewu4wKDvE_&filename=pf7-setup-fr.exe

http://download2085.mediafire.com/pme59cl88h1g/.../pf7-setup-fr.exe

http://ec.ccm2.net/E29EAC71-3809-4F4A-B9B8-1E3A605C347C/FinalDownload/DownloadId-64B3436BB8B3D94E8ED117B88D9543BA/E29EAC71-3809-4F4A-B9B8-1E3A605C347C/www.commentcamarche.net/download/.../Photofiltre-7.1.2.exe

http://ec.ccm2.net/www.commentcamarche.net/download/.../Photofiltre-7.1.2.exe

http://f.ccm2.net/www.commentcamarche.net/download/.../Photofiltre-7.1.2.exe

http://www.commentcamarche.net/download/.../telecharger-175-photofiltre

http://en.kioskea.net/download/.../download-68-

http://www.commentcamarche.net/download/.../download-34090233-

http://www.commentcamarche.net/download/.../download-175-

http://www.01net.com/.../telecharger.php?id=21756

http://www.commentcamarche.net/download/.../telecharger-34090233-photofiltre-7

http://static.infomaniak.ch/photofiltre/utils/.../pf7-setup-fr.exe

Scan pf7-setup-fr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.