home

proxyi.exe

AnalogX, LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
AnalogX, LLC  (signed and verified)

MD5:
70aebb0369d357b88359ce1e8505179c

SHA-1:
fa3be7978e37eb1395f9ab94199141f7cb1e5392

SHA-256:
ecaca6aa898b507b26b166d97b78f4c7a7b6514b548985bc66e71e8d34a6a9c6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:37:42 AM UTC  (today)

File size:
392.7 KB (402,120 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
AnalogX, LLC

Authority:
GoDaddy.com, Inc.

Valid from:
5/21/2009 11:07:58 AM

Valid to:
5/21/2010 9:58:20 AM

Subject:
CN="AnalogX, LLC", O="AnalogX, LLC", L=Tempe, S=AZ, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00AE55A5F80EE0

File PE Metadata
Compilation timestamp:
5/23/2009 6:13:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:xefdDoDLhnowxc2bDvJQT80jp0jQ9p6c789zCRbYj44mIwSUuAPq4sLH+/7f:wRoDLvO2bDSzpd8pCRbYjiIDUuuYiz

Entry address:
0x12357

Entry point:
E8, D7, 71, 00, 00, E9, 16, FE, FF, FF, 8B, 44, 24, 04, A3, A8, 87, 42, 00, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, 48, 58, 42, 00, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00, 00, 89, 95, 80, 00, 00, 00, 89, 5D, 7C, 89, 75, 78, 89, 7D, 74, 66, 8C, 95, A0, 00, 00, 00, 66, 8C, 8D, 94, 00, 00, 00, 66, 8C, 5D, 70, 66, 8C, 45, 6C, 66, 8C, 65, 68, 66, 8C, 6D, 64, 9C, 8F, 85, 98, 00, 00, 00, 8B, B5, AC, 02, 00, 00, 8D, 85, AC, 02, 00, 00, 89, 85, 9C, 00...
 
[+]

Entropy:
7.7047  (probably packed)

Code size:
119.5 KB (122,368 bytes)

The file proxyi.exe has been seen being distributed by the following 25 URLs.

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1482378097&Signature=JJrFSlJBVTV7xrtxJ92Kqa1DPujqFKVap3UsgicSapDM2wewOK0DB~WF-AI0wdQbQs4qKVvqZ9-OMGCibosxuIaQIZEs2kZ4g-Ae4OtDS5Pl4ueU4VKiNQzPyi92pqo0Mvb0EF5JHUdW1o6~sqp49sgDdWdMEFSL~IrlJTKJjKE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1481250200&Signature=IIQpiAN2Rwlah0x3SnGEJyZPi~7-unDsP3PBtTC2JABdUE1SNRBySLP0m4WqtYGMe1IIPKxoMEL4Ia0IbDSf0c0f2oyMdqmYanCF5y3uZmpnh9brZ5DkvUt0zo73K6JKn9nEWZi7~6Us45t~pAnpPX7LNLZ5Iv5OXiiuz-g1i6g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1476943562&Signature=E97HA-sfje-wdVoAL-JjPA0leZs4Q8vovjfRc67NC61PEfG988HbzQnB-K2Qt2Ud90ewFY3xb1-sGbfr3SctFQo7QPB0geztdH2DumTwSXSbrKxR2KeP1SwFUywpdWoKmVxnR7t5NyS~ME-bosQWSc5zjLyhAB7w0r0VmEQXsYw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://lb.cdn.m6web.fr/d/c/a/aa6e759ed7369862f7e414514cf760f1/57df048f/soft/.../analogx-proxy_analogx_proxy_4.15.380_anglais_10094.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1476821726&Signature=hHVoFRTzLCMPmrhA83I3sWT3AXBbNcqXjHKgA0g0bCANwOlCq8f-a6P2Y49q77xSG4Y8USdzE2ANSWwjXXs0bHpUULzv5-4H5Bbfksaw9MOOqaCafUNPrcvgoUGQC6rPDpfnPJAaf7nyvJANVjz1pqj5S3ESUBzkl~xnrOdB5Rk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_es&type=PROGRAM&Expires=1448285689&Signature=c4u2TBVs90t8TWHGq9u3vzfgmEdR1fe9zF5-VhnvjefhrqS~CcpjsKo4wIZWDx8xjMcb2wA8yECThjMQ~pL22cYU66Hu4jOfWB8TgE51EnGhXwD51J0lIFIYLPj5Bbm~nOWnHggTVOUEuwuaqIddcxRjyzOMUbuPjeKVwglw4xM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1447916276&Signature=U3DyXX2uTEtD-8VZHbwt7sI-JWvk2eaGH9I9ZDVGTFhA4JcYGnDj-8cT1Ew9G9lrWcddqgQqkXE~DHrKtOfdEXTlHZ86a7hssLAF4qh09NqHIKI2JbiS4lpvGUHSuBQlXAa5Z9~0bOikByaTlgjVC3T2scfM1WxHdBnw5mseHfY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1472441184&Signature=VfAZwnnZinddqNRycT7Zv8ywqUvMhvu6Zm~I3~cQz5ISSPY3ZbtM6FsvQy2nKn89SXdAWI1i4xvqsW64TGraIAXybGKgYM5RISAXp5hdaNcerL7l3AgJmCOpub-uyQG5F2L9~iUuWTi6jcjl6Teo0p5UBOK-2kbU349dFZZ7iXU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://www.brothersoft.com/d.php?soft_id=10832&url=http://files.brothersoft.com/internet/.../analogx_proxy.exe&name=AnalogX Proxy

http://software-files-a.cnet.com/s/software/12/50/03/.../proxyi.exe

http://analogx-proxy.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAO7ssCxytyg/.../e4fPfCohQb5GkMS3RaJ4=

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1467509804&Signature=YiBcxXw3um~esI-X1PjJKwjcpNgG4HA-a8O3-juKqh5veoEhDZ8FMP1fzFCgmX77C1XavUx~5nSUNplBO4Wa0YZC9~W0DtCF~rjrBy94vZAOiQbWWfZFVmI9QSSOWpd2YXPhsw-e91ByK8H2nSEObh4j9r4s51J6ejlqXPzlgzo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_es&type=PROGRAM&Expires=1462940303&Signature=Y4-3Q4h1AP3OaO2t6LKRLBj25Wq-24qPK7yW1kFpY0t1-lX-U~3Kv7HCLfW~sfB1XgNCNrs4eQcTCJejOXppsuUVSoglSexm9oaNj0AzYBmW9kHhiHJRem3ppoS~w~kW0i-RSg4Pdz2gHvdwRgmtRaGnpXGcC3CMsvG48nGR7SE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1460663744&Signature=GMBqnTklJYzbNU5i7Y7AuZm17JULYP1EIW5ILM7HY7Mfp8xjWeIxqc-qpOfpV0HCalas5~VxTPuHNAgLr4QVsRLatsGR-aPC7jAWqx5x10c6~W~A4FVsP2xzhWlYfzqmrZazIS4I8zzQBZRMkYIKNr1tG~NsMJ-aBGAdGPwRAgA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1452308073&Signature=bmY4-tzs0a3qry6Dpx6b2MwFNlIHeBjpTJeG6N2WGSxHRm6TtXtxfA99WPBDwgENSMr37A9joOSaVkdv9z-BxYDMP3VvFF3OgXT68qdgFqAo6PD5V3ApWKNeUUrh3mLWG2SUJeXgic3Dr76z8VKIQy7zeVFHEZkxWf3bdj3H7z8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1456591342&Signature=EbDrvWifXRIfjchNPzKJm0-nn7IGyrDrP~kEEu3XcFOj5fAO~IJ4blrGO5FeAhgCrwO78vuoWNVoz10N2IFchRQouiP4uuXYsRRZXo6V7TKwzmvDUHxi--oOauYbNpoe4ItYMYo2PqJ4kRgIc6QGAM9m1dmVLOsly~Xddq1La-w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1430986385&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MFVb0FMvn9AoU0p4xset2xxIVv8y9jzAKzTjL5n6f7YnhPGqXQLRnD9ckwhNhnqJ7lYg9iRd0SldfC520XbqwGB2yYCfAxofxx4Z42aLBq1B1z16Iy3u6DnVtpMIuTk7Ry2FCSB5H9Hgrhos1-2yDPTzUi2HZQyCy1~VoTa59KA_&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1451443692&Signature=cPigTnMsTfPFs4S5Zi8OpD~vl0HXSUkHdUAPpV1GwZnXz5OaqljfbMUPbd-s69opP7z5evZrB0~dJn-gqvl-ctTj3wFBZg0scwnGYlOMcKgLxevjp~tBhqHHy7uLG269B1bO6LDFQAKgqxG1l3Pc6YfOuXvlvXOhH7EjY-Ux3Yw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://s01.mydiv-downloads.net/download/aHR0cDovL3NvZnQubXlkaXYubmV0L3dpbi9kb3dubG9hZC1Qcm94eS5odG1s/0a665/ab124/soft/dfiles/ru/win/Proxy/.../proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1453077199&Signature=PW0GffLbqiyJw7fHJRm6CYnVr2B4BsRTwYGe0NV5U2B4~~UN5Yh7MtbbV31JkIURpILXoOeHiN3Tg51MDlCUAuR9ZfUXW-MFJqm04tdhn2d8eQd2KKwxjc115cGR~1xZLtc68PxlK2fmJGQJF8hUlwQeencVU5JxO1ZJZ8D4HhA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1454458567&Signature=Hc6-94CP3I4lHpyTk-pQGIzvDajVPyNn0C-zvL0oMBpzYqZ1iHXyUuGktOyGF1kCaTPPZjAflUsaCIMDKBnlkQipsJ9QTod1xyXK3EGDWAd9DIR96k3-UMKIh2ZVl-xLgBT3JMiX7brYnJ74tRuGnw7SFetePx9l6SQUywp4Yjg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1452471416&Signature=HeuuQfTUOHts0ICkQZdh7KwXk~jGuOIRL7MVc1a8ZAElLqVDFx74b6Z9M6xBTOlHtMmXyFb~oeivoCAONfJVK4O6m1H91D2ak8ny~zAkwxlI78zl~D-wzoNhyh4M19cREHDp6Jsxjudv0OqIFWSzaAGPlNShDmIhsfVXrwD-jNo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

http://www.analogx.com/.../proxyi.exe

http://files.downloadnow.com/s/software/12/50/03/.../proxyi.exe

http://gsf-cf.softonic.com/fa3/be7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18000&instance=softonic_en&type=PROGRAM&Expires=1452684012&Signature=c-UK67eKQwSt7KbOUARe-SLKbZXAMi3o4l4ZjpGHB3~fSNxb7Z9~Iq-ZwdYP0GcxXuKMDkVV9a9lbbp7hxZ8hBOTxOP-xrw~0UOIbnpztdCZr3jkIYqOLyaP0CsLW3xM-lsehfFA41NvSPunWy3R2ewurh06iShpg5W6FOM-h34_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=proxyi.exe

Scan proxyi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.