home

photorazor.exe

Red Shift Installation System

Stormdance

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Stormdance

Product:
Red Shift Installation System

Version:
1.6.0.18

MD5:
0a181cf69b170582a7544d477cd1300f

SHA-1:
44b253a8248c02a4af92d6cfd566b7f6bc698af2

SHA-256:
0ae6e123b26723db59368b5d4ab6783708cd7b649d435713020463c25fce829e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 7:42:54 PM UTC  (today)

File size:
1.3 MB (1,351,310 bytes)

Product version:
1.0.0.0

Copyright:
©2000-2005 Julian Spencer

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:3hIrB9jTMRIw67ZMGrmD69F/TJWfqHh86L4NLD3uPM5xPlS+F3HI:3hIcOw4prmW9VsS8HNWPM5xt53HI

Entry address:
0x8CADC

Entry point:
55, 8B, EC, 83, C4, F0, B8, BC, C8, 48, 00, E8, 40, 9C, F7, FF, A1, 88, F0, 48, 00, 8B, 00, E8, BC, D9, FD, FF, A1, 88, F0, 48, 00, 8B, 00, BA, 3C, CB, 48, 00, E8, 93, D5, FD, FF, 8B, 0D, 18, EF, 48, 00, A1, 88, F0, 48, 00, 8B, 00, 8B, 15, E4, 96, 48, 00, E8, AB, D9, FD, FF, A1, 88, F0, 48, 00, 8B, 00, E8, 1F, DA, FD, FF, E8, 8A, 79, F7, FF, 00, 00, FF, FF, FF, FF, 09, 00, 00, 00, 49, 6E, 73, 74, 61, 6C, 6C, 65, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.4808

Developed / compiled with:
Microsoft Visual C++

Code size:
559 KB (572,416 bytes)

The file photorazor.exe has been seen being distributed by the following 25 URLs.

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1474660181&Signature=WhnFeo9yPvG1MmUvbDkzuSj2LByCwK5Ro4FHnAw0MyOSrLoLlWEyHUHLMcsAZr8k6aYIEIi8x8YnQISEzFMrqoXC7EFMy3VPF2NnivXejzKj547nBeuN94xxdHqLWwLnkgfxDhiLwlCokLfdgaM-zWWmh1rwnWdzEBFSxt1Oxu0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1483312967&Signature=KAkhGKsCOHgmq6g4EnZY9Go36rOq6Mgc8BvNg3RfdmFPQwRKj~lwNTfNwYtwDNtDsjh2v2j2GnEgtYhfnSeYe1PsLyCGPA2VZO2OQUC-n2XkP124ZwDr8cxZnz-XC69Egk3R87LeLklrwqllmuLhchw-vXjdpNMEa7E8L3Zq~Jw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1477931735&Signature=ha3xm6FGWXTTQGGIGEz8Z9Uz1eDugwOWLKcOmpUr~DhG0ycA1qK~btOpm7EjIIjYxtXRdMMmcqESFENC275kLP~7WEqhBtzAJqHJzkfPPl73jY9-uiL5rqjn5cKW~Mo2a7MzLcEDhqIizEt-b2O8LcDuq4vLx~biLsrWAWy92Gc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1486540563&Signature=StISOT2brXyBRAnQFtCVJ-ePVGP~lRl1N5AqRaICI9Or6RhIQfNFevqlIkoiJ8AoQPNtrKtaEShI6IrcD0Bsg8IVCnY8F-5rVsf0Ac7EZb~8cLjiu03LL10vyigZvbUKdmpCaXcUddU9tdAosJldzLgRVBn9n~Ek3UQ3Mxj-Xwc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1476942587&Signature=Sl7Rm4ddNVqvrcE4UAGXMVp6TFaY74j0OAWWaUuBZdLIoj8lqZ~NeZyiRk2Htc9xX5fpcG6kEUcXhosu7Ji4e7-Me1VwTnva6A4UuPDYM22YywxukoxJm7LYF2U5rRE8kBW0oxe50blnn89pHN4LfVOAl6Wyqzk5r2HRyJMItIw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1479952812&Signature=E01-M0dSJFRDlaIcSZ2Pa2g731er85ACXMJX0QKi-Cv65YtYFLe-LcyZeKgDyiqtcDr3HncNDU~viSk9ER01U0g0ZL~~LpzsHH2Zr9TnvCCiLwpeENwAeDYbTpfqOKT69pSeSdjr~WPIOAwcfVzEMI~cnIMzRAkfT7ZNH5lcPIE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1474915022&Signature=NCG3jgd-C01DQ-JGoDhrN81Fmzrast8XN3lX5Gf5WruZ9e8cZKsNcKRZj4BvXyqNyRolmYJTJ8-dahgkldQ4HmH2adFGJm~kiz1NhZV6-korEGDnTYo8XL-jq1BsRjdgoHmXCxmTtODgvtUdQNrCS~wDGRSLRyKRT~bWmDrgONw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1474532192&Signature=DxBN9Xpg3cuMZ18m5ky2PmHlci1rDPFliaPe3-PyBkA~1psOgMq8H4MJVRQF4XJJGdg97YnxVI31Dj0SNGR3Bfhcrvg3Yn~A1hpn~dNOoPuI0RTtcOgZv1PfNbg601a2yNwRFNbT4dNoBRXRzNdEGfay7uYxSISCqjDI283ywLU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1461154162&Signature=U23v6FhVzHX828hCUA8DUqXO4kzYOV7-5fNkIJGWOWB7RKdBudONfU-vyRZZuR15Ydle9-ADld3iLTRXwoIxcEZD~1oz9x1Ek7Rn9LHY7kof-GxkZOZBFVA750XrT2IFzpOSGfYaPNozBkWvDzPQ81Gff6BdHLBmnbwyM64gPdo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1452624459&Signature=XBeu~97Ub239xCVgn1NKJ5E1BCjELsHfeo-OALXt8~7PGYBiHl~ZILA2YRJUZC1sXu81JphjR7uQ0RuieMByr3~J4OC4CXG4htwmKko~pFLnoQ6~oEyWgJDNSGgrBCqUhWYniSATC3mPzCeXy6Lz7P64zFP7fFD5aVI983Cuon8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1478687196&Signature=BXnn-EQWvkKVmq3Vp59KZpitsOWrmFJgpC4xjbdJKXPb1-hkjdaWYQsJUI6ZVEgtLcHmdTRottzqHIgXj0eC73Bwg~z07jstcsSQaN4lFk~W~Ebvgksfp8F3kI3hjwca~FKhssbxkvwNayY-SXF6Z179ZJpYuLmWbVPqkQBct7Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1475668453&Signature=Bol-Tui857no29822K25IEM~4tjsKRq9BJRshLdtOlyM8o4j3nmDhG-AswpMjwqdD9JZAINo6sw-pyS3BlFG79QJ6bfeO2IbbJqUSqf9yslQaOH24Yeadhl-Sj-jlAObOojpnCn83WujizMvmVuHuvmDdsMQaSlpwaw7faGanFU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1469287967&Signature=NZFYR75xlJLlfMglG0yxa7e9ld9Mka0olhJ-RuhL8J-gWCcbcFUaRdZz6LPGWfyPPq3Wn24Ku7Yekmo71bm~OsCGt8tfm-bSW3IZfm38Gu6-qXiFAVnQAoVCSiWWGc0HuJnjuNUXSm3rIbr0sR-obO0l9MaIxqhbLE0tCQjPBmw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1474993327&Signature=W2yFofrpHHmxUJuPMNjEKBKfB4bIZGc71NoE3hojoJxZHClm2vw0OylRnEcb9YMvWN5t7SxyiskswiYEUaPb52yJriFN2XPdLd6i2a-pS7vPoO-pvyhi9Xu91ve6yfoIKCzOqxMb8szFvnCmvT1QEiF6MoNzVPDKmZBajr3LYvA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1474497821&Signature=EK6HpPhOvdIGSVx3BZtU-EgtzbGhzTnw2f0CXAgnW82XyqwLjME6nawTAeZcB9VcjBF6I0hhy1x3K3FGMrc88DtWeZHhEpDdmJvRf77pKC89xG-h~qStDYzWKyWDUXzPO3UPBE2KqnNVfKuVJI-niMz6bIUec24O-j15LiBl8RY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1475627332&Signature=Qli0Ce1XqT~5gUb2NjXtYXyLADzGS5Lh4iEw4eNqbdFxJQog24GJLuDbojaWH8SwU3v6LYzVXybCI3QQiJMsz1K86h3casfzWlQhmJ1yFMph61ngv19~~UdjHhrIbFQ0UFNHrQQ3rm8dPonayQkIZ8VZl3kZFiTFh9Hg3Gen4W4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1446344014&Signature=No0cdliWoTqnkZLEJlgunnPgEE0lf29hcIggn3WWEuzTwg6QzTBoZj81pLJs6jGDbwbwljA0iz6xFM6yukAnz1GlRp0RHKPKiIrhbX97wmiSx8odV9Ft2b7jetZ6EqztsPC8k6vUK38A9z7wzF2JD5GFtabQRm2iIyygTDKLIyg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1477947518&Signature=iPOfjzGoPfb6Ww~afNvaqeSUVuqwQRP1emKEFN~qGZ5clv1C1pLLLZAg8WNkXbTOdiQJVei2yyWB1qNjrBT4UDJjOupbV3rEG4WrhCKI-bkYMrzc2wuVwwsGXFRnNccdS4OOXYzZs0aeKR2Z9uh3PYKFc-W1NoT~YCBHv6x~v4I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1463894274&Signature=WwiTVJJF-qowt7ElRbPOJ5iDKZNuAGKkGo-1egS14JPoPAzB1-Zr5bS6xbRboEPfo2Y25FWJeoGhPTyct1A9Grc2CcvPbl1TLYUAB5a2-3sdSRZLUCnIX4jF6mvsU35MVz7QoRIswSEtpakTmtH57oGByNR7zc8hJiMrdqee0eU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1458712394&Signature=GrTA9kh-2XIhEIr1lwAiAu2lhJ1U9PKFeCDkZySxRWnGSQ0oVDcFV-jFD88bSXa4lp~gyr4VKOwV-w6D-4~aOMqdBG44g0kMwxj9Z~V44ea4GRhbkqoD16l-XjkQR4~W8aBJFFeVeujtvnYiEjLKfWNTToqps-Z~NzGga~CoLhs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1446804028&Signature=hedFSBOO5lnGwIonTSb4HQ-473w6wi8ZA4jlVgoUvaKHbjIQVcCJiD7wJa5RLeLyzyFgcuPvQfSR3RrUIpc8t~iBTyU24lDQUF1fysAsZ-gml6JmP~dPMNVhYZo6IYfkWDPaVG9YqX6gw39k46ddMdN14VQkExVkCVYVQCcFsvY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1447290340&Signature=OSo6EHOjX3GNBRlx144HcnWDVIEfsbMFsTRE~k1IcKWQxdS8tj0Ey6ou2kesvdpL~K4CMOZxL4KIoUj6jgz1XqoDq~LLsAh3C-nvrxit-hq274WZTBl4FoG9-NY58pdOJWa4hxieY~PJqLw2ZY4t-MBG7FW8fxaXfFm785IHw1E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1455907916&Signature=hlUcpGTqdawb~3DOoNyJVcon1cS6iiTBBUKRWieGyAehMNHoDsClScAdUKJXQxTqz6ffTxS5c~uhrv~n~jtEOckoF0Ff2QQBmImAtNiI03qq-F7Sn2xgJu1hyzrtoOZmz2vuXfyMx6fEg6G0xuV37E7ilRphbikz8z9HIE9ixw8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://gsf-cf.softonic.com/44b/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43436&instance=softonic_en&type=PROGRAM&Expires=1459654277&Signature=iecDvRFWgFbGBNA7kkufpqJKyHwlT8G~btpoOUVB2-qM5F-Of08Y7hz-LKjstZIPZ-lW3hc5~F5ZbvW73OYbKqbGiQkJrNyVe4qmxzpM6rel7~F6vbET~GETCmS8ehBgti8X0sve85Nb9mVvxX5fZBtgWquqdmwVYai3gwubj1A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=photorazor.exe

http://photoslibre.free.fr/.../razor.exe

Scan photorazor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.