powersetup.exe

Power Challenge AB

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Power Challenge AB  (signed and verified)

MD5:
8fc23d1941d06538d472d54e0c311ef5

SHA-1:
d03d1910b0ba9353d83e250099af3fbf84c6e701

SHA-256:
40e72865dab47a2fd37cf5858c4c96f21e5d5028b4b9141acf8d5bb0629aa99f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:09:49 AM UTC  (today)

File size:
481.2 KB (492,720 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\powersetup.exe

Digital Signature
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
8/7/2009 3:00:00 AM

Valid to:
8/7/2011 2:59:59 AM

Subject:
CN=Power Challenge AB, OU=SECURE APPLICATION DEVELOPMENT, O=Power Challenge AB, L=Karlskrona, S=Blekinge, C=SE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
35218C84A2A8C3E9C0A000CE40CC2B31

File PE Metadata
Compilation timestamp:
1/28/2009 9:42:44 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:2OqIx76rK8InLZzurvKJRSDsG1BaxEg4ivj4U3f+2:2Oq1G8wzurKJysG/PoZ2

Entry address:
0x3542

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 64, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 32, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 20, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file powersetup.exe has been seen being distributed by the following 41 URLs.

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1462254442&Signature=OtddBZMcj7oJJSpJwvDbqXv1p8jcYzDyE2Pm9MKqyydj7zuCsEqBNwp7Sj8bZscJMXVUdq3a4NE-7WuYV0EgzsOKQCZkw2cqOrY4-OUuQwtCuvS48fBtfxMQTd7Ccf74iyLPWmbKQSkow2YxMGyaMLIiHMe6ig00xZS~Wndqa3c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1465663488&Signature=TPczoFGXK4L1BnXXTgqsQ5cA-YVIQeQIEzwhsLy45U5L9iMgohuCAYH9k4NCKbCkAPGkSq2FcwNhSRj6yd92Ljcybb00DHehPOy4FqLwuj0aon9nm-9q-mXn1on9z5baVVWRdaP17OJnUquL8N0eyRrCaPd-IbKRlgsp-GvvAG0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1480745912&Signature=ita8T4FjV~6LBED2o5pwDIUDNK~cYG3DE8ruCs5vT2D6hyI8uG11QF2W4dvKLisXn7ZbDF1Cnv7xHOadkah1GCHklVznDG1-GkJCDRKJ5hxullIrJ5fGJ48N~n2SE-7rTDl2acpbUYkHl90GJY2G-gcaR3yq6zQMiKHiUiTJ3A0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1483165013&Signature=KBYdIcp8SUbRlxUjMsEVU10iIr5Qh3U6wekBqpdIdo2NaRcnDOj0ox8RNltFsDSWTgTFynNrj5jWy2GufIU6MUWz4pZ~RruhDOthUIfIhI5rHnJIHw7t~mXkFgfJxvKuKqA10jSETsx1ewKKGVpKiSiPuDeHONKL6xzvXjM7hPE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1472283495&Signature=bO~jFv5SuJKQlgPw4XNEKAZh0lGiXQvoG2alz6iG-RbXYuPBvrDKPIx3GhzyHmx0q1aqXQ4hJfikX0GdVbrFX3EuBhOWZvzIkg5HA28Y2slS6DTz1oQqCPWkF679blECRmcjIhk7Vp2ixdNsL3tc8HUo71c2-d8TNDA2eH0WXAY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1478487644&Signature=THer1ROcR-cgKwzvtaOTblt3SE7d3TwvlVk~Hw9Bju~4boxwqAehk-BLqUF4epv-jX1eJX5wOHkjY71KuR~eK75fJj-6KTKU7ZHjRUYXkjHYzvx7Ll3uMpS4GwyP5cvjOH5gEPoJFMH4QxrgIrutVDUwAZunbPYhoy~NExOYTZ8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1480243148&Signature=h28p45~8DflBoaFf3zAMcrPg7aFynstQGMMCi5uay0p1ZLnNCu0nikIwUUIKGv6PkirkbZzPJLDs3Y9APrBb0EQeOHkWyWNZulnIbE6XujRFbWQm5PuN2nqF1wY6uelcethmbAQElq1UFUk1BLa3yDLBfvjTqcxP9kP-7OoX8u4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1476665912&Signature=dXH-YBn~uobe4FQxYn9MWISY3MEEp1oWHwlj1edbT4uSk0ds-3LEs3CO40xmoIhpCwj0cabAYfPl4p37pqNFaVT1yimkO4RYMgXo86PX6aJkuNVIy0CphNpIninvAVCQVBfoiHuX2YsB-aZVU-QnfAsqYDAwJXGaxrNtUSeG3fQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1460356479&Signature=hUT1S8iATP3QEE8CNeHs16TGO~Klpe~fADMeLyhW87g7HhkjaUFLRaAY924ctLAgSc4gImyu-G8YnOYo7R6GJg~18K5Wg9DhADl8bNHBi9qRtByzpYWhJnAYOv28B7iQelvYvsnOS4VJgx7yB2cBUgZ3xonodwzJ6naRk7dDtXg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1475654321&Signature=eDNQe~uXbSOUneUH2mGahSIwa8uxJtAhdlHOchUmMWaxpoxBuZtxneHHfGBI--Eex0tiGbdsMP4HhgPdR24gPVlUG6GEOAB9GZ1X1aEK9ZqUsD7fNzyU4b-GKcOQHUYYG7yutjbMxFXpZWe5qC8BrnJ71zgkkCOhb1iPjKAC9F4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1478699222&Signature=Le98I4xSooqQlrvYzVNkozS8X-1Wn-ivUJeMFPS4t~2RJ76TdxjCm352HhjDZFKRRPSXb1FF87PfvRYo5UY1o7nB1JcjSXXotgyIEWI4F38ESoPBL0pkDjI8mUXOuzspnKyApMnRrLnRhXS~RT7GGbud6Zgvm~05VtOfOqnbrwc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1475745993&Signature=LADP7I-Vs1tcHPI0TtWy9o3JuJh~zL-vZTMGK9eSdj0uUoyUgGV5ofNSBQYp2oy7ia2RGpo1BHXS30CaqM5YWz5o39QzxaDSKSEC5kbhA9omLPdhakt-uQ1rKGtX-GeMl0~~dM-baCUcRvYXa2WIoCxSi89-66So6-wTmGMeotI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1477951264&Signature=LjXwefElSCB3p1tQ4kku5lsanO~Qfl-0tseDE186OhwZVEjzQVR3fW3AsEr3P2q6kgLkQ5U748SnEqQcbcH94xolkqO9Lm14Th5cqMn36sV3KLgsuqAlTv9ke9RQR4iC6TRj82MdgwNEuE9esw2WSjFL7yo3HY93rKG4k6ASU0A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1469490300&Signature=OlK4QmmH1PhEZJ4h3hdyFPb0APCcH6nefF8ztwVZa9QDq9gejD6L6YJ7t7SJIrht-Mc4RRwRFwHFPQZ3jc~Sp171Pyjszhky9IW7eiJgek6UYFCmrWBqIC0-zgQ1KxvAKh7qRa6u-y34IoJbFEZmCaOQ5B0qFStPTJNvAMwl9hA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1478789020&Signature=HN-RL92MtCCQDAZhD1Bg3tXyLhbgTbvSsrveB2Ar7pdEfKYH~gSUImTFhyMzlZFE7LPM8KsTxLuNohaHsOKfhoUJJ97wVlNDJ00oTuVSvfbCLrdGDsjOvns6UsZ25jEGuUhzZgzrMZmXwhTUl0tZxzX-6IC8rF0slFRE6LKNxME_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1478789174&Signature=FKSDtRoig9I91q38GUTv5JuX2gajPcl28kpbuq1n-0ifx5p-e01r1R8YYyhBq3g0PJcHD7M6IdyO3y3NKFK4GQTKXzz4OFzeSihX0yiv9srws8ZLV8dDaRJ5xe0E5u3EWh-yTMsbqPlja4YiaQAt9ABaij2LHC2ex2wtBuul~Fo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1477293933&Signature=O7sN-Nk8UMTCxntC~veA~A-IsMmSzuvbCjUhylc7xoaPS837VMnx7PCoHfMtd3q~XeZhVuQyLcBPsqzQbSapKLsqRsWhN7dQ78cIwyJwQ-H5t65dNFHwGRmtWf4EgglrOjtSwnvH666hh0-MLXCje9uluKEbpZzE2dKvhueDp~Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1478230638&Signature=VBPcMJyrEYjxwLOAM5TDoOkJgNcpecK3CrnPGP52kJ8yJdUaWqgrV9GtniBqcaNNB3qHkepzoZQe-gpobJ4CtVHzC6rHT2~~59Pjm9j5-II7uewY22R9TQm9~Vuq6IJcnCOFtiLU0mV59w0BSXWFnwxCsYDau8Pd97iEAvuVhr4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1457133118&Signature=XmGX4PFBDwXmulsmPrBCfXWwlYVEtS89b2ZUYeXRaEK68ojsIyf74D2mvBXsvJzjyY4JVKO3EZngbJg2wiIUOS4U68-FFyU7CR4btk9RLC1TNS79wz-x9oijO~IbBVhkiVZixi1UlL6bhhd8BVC7C3nFTqP41WN~GTI-lPl2ISI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1454027409&Signature=bnitMNczkil8lQ-zl3SfCQuzKNUyDr67EIkRGfibw5ZWJou4UtF4bHZHmc1HphNpHUC9MTxI5HnfQwHvCcafUbK0nWPocft6mPvuP1ylWrBGxQcGQzlFsbvPA113c8CyKIMGlKqAwgAUBog6KE5Mx2nG16UWOy3Z4sRf51TdjrI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1425868511&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ABj-NqujT5-h8L2PlEQqiSx7aaZFgmG4rCgQ1PKdvkIJDqjP53cFpXZZON9~3X38SrUfm39UJSXHi-xeWQvDn-mCFOZiqG4-J2aTSLdv97FYyH4QTXoGYsIfWIMSV9lDL3WJEpoNeVxvc5qvapqBn7Y~NiQGkOjf8TDVPtpyvVE_&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1478457688&Signature=S9ZuCpK5Xo72hrmupwudVlCwihpD-CseiWUoMGAPok6pjbkyEbTYjRU0CXhbquIiAEJF9jEkBscaOfyrrW15kLRLHUU4088NRzpgZxEpxeh8a6Zhf9O1Ay45JoPOSSH216tMi7rRRvcfePYKOwsLVrRVf30uZ786l1CauObRp10_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1465031267&Signature=NJflVr8AG2NE67EK-LeB-jVp5s6OAKFxs1QtH~pXSy90Prw-egw16Kp-UdbSWsz-5YwPsoDBaEfsANfObAHugr2VYx3pR65GFgPrsVKriTyI9ig0iV0FId~EssWNUCJnPN2SXndFGGMVvLW0Kxh6-oGro6P7xeNl-dIAKEegSG0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_en&type=PROGRAM&Expires=1469753084&Signature=HZLOSVsf10s2ij91FWUpb5bB9k4PZTV9x4fiIY1ALuGZx~XIdgQE385TkPVJIhQmA1lBb2pCVUw6m53vCoLCO5A09rVns1pliBAP~zaAMyc8pQav0onTaPUwXqYOcYWRQneM54bnFQe0A0dF9D689JJ1k2f2j49YTkXbsAwmm4Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://gsf-cf.softonic.com/d03/d19/.../file?SD_used=0&channel=WEB&fdh=no&id_file=86269&instance=softonic_br&type=PROGRAM&Expires=1463898801&Signature=LUV4fiAnNgKtTmHg8IoeCzIbsCV7HEvkKTXHZWpkbQqfSGjLqUly-Lb8Ks7JMBiLm7Tw9Kjf4f6M8oMaafBSCzdi9epOMMu4ZhsnT8y2yijnPtTAMDwe6JW1euWIWxD6LDPbEA8mAIzQl0yDEcWQHHwrydBN8QCtdqy27o0lLtc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=powersetup.exe

http://www.giftchuckleflash.com/qq_1TWB RndQh42qOTzVcSyIEvAxYGfPiHg1bpeowDbGtMYPaC7j0CY97m97oJE1_lcUN2 o2mT1mn5GfyWEJPIKAApNg18QsT2RfLQ7tgxKWLUW34AuhZrmPsNN8dSteBJu82_nmu8q8LUgeS7 QIisAta_qKB3WDRVS0oSk4dOlSNnIwMAVKPrI9oF 8UZi_eGmSHWrPsTmnStuZLhayVOmQPl_60sdrft66rhu3Topde0HGxjHARKzroGJRd_tr_zlFRdUYSIsgq1pV6wrQH8qj1d fFc17BrCu3WYUfveKETNt8sjRZtfGMtY98bxhOyV KFzUmjl7n09K2QQXrw41MoDyaiEQFwAPYQRlayLNg0NsCslfJANcIjMzeu_CrtVJsCE8xejLhrHRZ93 GBqf4Qmv QvQhs7OLkMi8YZP6IEv45BQbJYstIchPwpVJljbGPMYz4bPORk9vP_LJIXtobMnDncr3baqS7WEn_ACWSNU1qfx 9ebX9oPIabL5JLLxyhzxAeugk Z 5cKc9mNrtVNqBAnYpwabKoIlxDjyoDZ4=-G1MAAGRwXmtrBxTFCAg24MAlsSzQQe2 su1Tf9_7EugXHtZ1q ci4xDhD9C1VVVzws3fKNctVbnt4WlooktOF7eTXcSYWBpoJIxkMJziSJIA-e

Latest 30 of 41 download URLs

Scan powersetup.exe - Powered by Reason Core Security