quakelivesetup_841.exe

Zenimax Media Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from quake-live.en.softonic.com and multiple other hosts.
Publisher:
Zenimax Media Inc.  (signed and verified)

MD5:
f9fe097fff487d95ef738e6fae45ba01

SHA-1:
843d1542bccaaf1bd46bee0acec95d4bfdfc898b

SHA-256:
8f603ae19ad5efe4188b472c26d303ca5883b211425fa5abdf4ffc521f82e9c5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:32:06 AM UTC  (today)

File size:
5.7 MB (6,024,320 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\quakelivesetup_841.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
10/1/2013 2:00:00 AM

Valid to:
10/2/2014 1:59:59 AM

Subject:
CN=Zenimax Media Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Zenimax Media Inc., L=Rockville, S=Maryland, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
528D271BDCF7A7F44227E8DD081D9DEF

File PE Metadata
Compilation timestamp:
2/24/2012 8:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:bLpJCNPInBwr9WULCuYpCtPSGi9qInRIkyJ1aHvhWi3NscGmPH9Y1z9SMGUNJ:bFgPIn6xLCo1oq2RIke1aU4Nhl1Y1sMP

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file quakelivesetup_841.exe has been discovered within the following program.

Quake Live  by id Software
www.quakelive.com
About 6% of users remove it
 
Powered by Should I Remove It?

The file quakelivesetup_841.exe has been seen being distributed by the following 50 URLs.

http://quake-live.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMUnhv/i0wj45rzFtj1WTDheZ0spcbUM5sCuJpTvcPoY8oG/h 4N0frXTq7ulb0lXI1Q aD8 HAws2m ZM YchmDzMoU0aSieKruo/z 6OpP/2LS4mpwoDLo99ccEbeYO7PqnnvfO KqtIuawwzS J/Uz6A3XelPxurQRBVI9P8uCw4Y0d2GsKjiI8LL9dsPBxYazPtCAgqzjfpMruu2gnhcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlUwbGvH7c3/xWV6hhfhesNluVe7BkF YkmZl1J95jRPxeH2u3B5BwwNoX4tmRI / PFLmK8Q1TQWLqJ6T3Egjwlql86tbQjon29IojD3OLwzr51geOLGwpHll6Yila4 g auL/4S7dVSvO872USDEXAFFLbKGc7IQiZ6p9ZbsCGlW9Rg7XUHPEcjkzmcsCsRqm6udQF vgDAAy8oAsNXQ7QkVgmId IELFo oSEVEr jdQcBtpvDNHIXZhooJwNmtGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cwJrfLjalkVqOcB59VrbYHA5q80HWwBjA5NpOaMMAIDdVfS 3oQ4A4hxi/.../VZViIPEY=

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_pl&type=PROGRAM&Expires=1483498539&Signature=XwwiEdi-Pj8yHoR8~OWHTAnLUT1k~an8-3QMC88Lyt3P7RlBucGnm2KssXq9hZbfCctyKcjPr1dfBsjw8ttuZE2itZlPl8czQVC1IxRc8jd1i9dnUmOPtXlLEUZK6UFJiQxysYuKUtrO1LAZyqMxHhieenSp9W~U7M-nHAKFSgw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

http://quake-live.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMUnhv/i0wj45rzFtj1WTDheZ0spcbUM5sCuJpTvcPoY8oG/h 4N0frXTq7ulb0lXI1Q aD8 HAws2m ZM YchmDzMoU0aSieKruo/z 6OpP/2LS4mpwoDLo99ccEbeYO7PqnnvfO KqtIuawwzS J/Uz6A3XelPxurQRBVI9P8uCw4Y0d2GsKjiI8LL9dsPBxYazPtCAgqzjfpMruu2gnht0U13wfoz5nYBznbRF6j61I2lvpZkjmJ0a9kQzOUp/RW ptcTCDL/37BfI8YG w2Lm3KlxJCQRiqmd3oVpp6M4G8ShrpC81jJeukzHF9KbFnFzmAsumTRGCGiT1uc893ibI4of/0h/sHAWHEKRjZISpr4ZPKu3qNhcHm3a52lLGkUApBM5 QJQnUsIp OeIufqeLz4W8w44jnArUrWKtqq31coXT6d67I7ekYjKJxYHQKf4Qc2IHrZB4GFQKVGoCkDgpCJE9AcOgNZyO8PL8PmLnwr391mhmyLDPCkz0LG1GUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cwJrfLjalkVqOcB59VrbYHA5q80HWwBjA5NpOaMMAIDdVfS 3oQ4A4hxi/.../VZViIPEY=

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_en&type=PROGRAM&Expires=1465358249&Signature=gzGQyreRhlgHa7HVBX~9NpCcOVSNPf~O9X3vhEnQZ6XSrtxmeSRb~sIWRqD114KglkzgD0g3W6x66O1uDSJaDo5MUpHmGcrWdo~Kvg4EpUbx8CTv8hQSO1HERPMX0m7XHnL-5w4yjb0HLf9eAwnwwzwVXTnRurwGO7IqIq1p0gY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

https://quake-live.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMUnhv/i0wj45rzFtj1WTDheZ0spcbUM5sCuJpTvcPoY8oG/h 4N0frXTq7ulb0lXI1Q aD8 HAws2m ZM YchmDzMoU0aSieKruo/z 6OpP/2LS4mpwoDLo99ccEbeYO7PqnnvfO KqtIuawwzS J/Uz6A3XelPxurQRBVI9P8uCw4Y0d2GsKjiI8LL9dsPBxYazPtCAgqzjfpMruu2gnhcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlV8dc4GT7gwUCeydefrJmjl awNQdJtsyQ/tJ5MwG90CMcrdq26qGKdouJT74QRV1kO0DeywwzUl mqJOEv5usp1q tsr2K/tCafkQ6Fq/L81UVwJCrvVTL/zvcBnKgGp5O3mI/YBiLjpDJhvpPljYEcwTb8CckiCVhENvECAFubYX9fScg0sAedBYix6ECnDiYlew3E WCQ ewCunI4FVJNUMOB7sIr8nIm/Vq99 BFyWhKpKm6VORWEXF0U Lu7xGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cwJrfLjalkVqOcB59VrbYHA5q80HWwBjA5NpOaMMAIDdVfS 3oQ4A4hxi/.../VZViIPEY=

https://quake-live.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMUnhv/i0wj45rzFtj1WTDheZ0spcbUM5sCuJpTvcPoY8oG/h 4N0frXTq7ulb0lXI1Q aD8 HAws2m ZM YchmDzMoU0aSieKruo/z 6OpP/2LS4mpwoDLo99ccEbeYO7PqnnvfO KqtIuawwzS J/Uz6A3XelPxurQRBVI9P8uCw4Y0d2GsKjiI8LL9dsPBxYazPtCAgqzjfpMruu2gnhcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWxWuzh6TveazivwYVFz1N Vc8qeaQOqBE1zTKte3cCCTNJWAjOPqal21JYbvnIm74FT a/R4j N2jkFTOPtKliFox2DqcaHX/phEVb6iznBCOo2wKVGVuxida/6cnsbw0mL/FLqj4t3AVzTvPrB3gziLiJAWbTAMszlHXKjndFbT3svLcRoM9l6fAeymM/WMTMbcQQV/TzT0JHWnExv68cj3UBRj8X5gAZW9O8aQRKm/y4Y94XUxDuLY 6 ERGYxGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cwJrfLjalkVqOcB59VrbYHA5q80HWwBjA5NpOaMMAIDdVfS 3oQ4A4hxi/.../VZViIPEY=

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_en&type=PROGRAM&Expires=1482131400&Signature=Tu5gO0fMDNDOJdy88y8xw4SujcDbY0UjGsMCsGYgJI1b8G~79Co-hvnsDbmIrbS9TFwGZkJFWyn4Nri~f-~4BAUwDrWjx6hVQeKaJBoXsBXeIEf05XkWOy8bUPGtDPgvhB9Vtti8cgyUVH2lCpypubOE8cV6rNRL-O8RKzbC9DM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_en&type=PROGRAM&Expires=1476842024&Signature=Zh-xdCe-03bknzj1OUY~nlosG3Napqe~RkRtgoGwrNdT5v9eOJMFqKEemymrjxWj~NSzc2j7nzVA4~qJaqwhnBbWdcOHqyjahaR2PFwqDbsx~1gwhggm42T6RtgfnciSvOlMDaR72kRwomm7XmDnAbM2HVkMwTyStnY4bkZrGAY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_en&type=PROGRAM&Expires=1481945801&Signature=cefm5NE9Hd5446tw~GA0N9riGbkgzIN1ClkshS5pIPRl27pcj4UnGKQf9boHbkQLpooPsfVEax4GQugKG6Y81DzD6aL79KbcvLJpTy-WgX7P~y~IZC2l4~VzxRbVc-MdimagGuEwNe2YrlLsLfeIfXzTgd-vc19VMIFmHtzDS8o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_en&type=PROGRAM&Expires=1476148364&Signature=WFZg4xogB0zWXQvJyXdvQSbGi5cwuRsrDWRhLhEnXJsW7zUxJvCYSn4TvIp2nM96CMUKeckuWYBoytdCYyGPUuQdtBphF7qnnMTiwvBdGsV5zK4f3WmgeL4Iq3QMPzQpW7UGfWV9m2TXxy~7-xAZnjq7LELA0TnPo12yDKarcas_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_fr&type=PROGRAM&Expires=1462578777&Signature=Yi2aMMLRBN4UBJKXfzWnHpgcTJZvXyzVAD9MHfihrl4XwGpTCgeL8XfLgVHwe~xb-Ezj49ylu5ckAcbyye3PoEy-qwRMuUIftNniMSmXAcdcw8IAh0Gz4fbL3S7UKlNulxweIrWtKYE3CdHedhc8--rqQETqie5GiE5WVNCCaUM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_en&type=PROGRAM&Expires=1436496915&Signature=bV1kjrivgZ-QgSfERBwOvSkwulCDIAvLoqFMg5Q6B94fD6orY4WBa0ggj25QLKWoY5NZM1N6OOLta65dZavJSUvGHmkPu2HPEFiDIrgkJ9VLvBb75pJOeieuJ7~L9s9reqBBKeNj~vJ5XflozMu8fM4fQUPKpSge3QwZjW5rG8Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

http://quake-live.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMUnhv/i0wj45rzFtj1WTDheZ0spcbUM5sCuJpTvcPoY8oG/h 4N0frXTq7ulb0lXI1Q aD8 HAws2m ZM YchmDzMoU0aSieKruo/z 6OpP/2LS4mpwoDLo99ccEbeYO7PqnnvfO KqtIuawwzS J/Uz6A3XelPxurQRBVI9P8uCw4Y0d2GsKjiI8LL9dsPBxYazPtCAgqzjfpMruu2gnhcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlVd4pMcWMt0emsKk3LDiIQIrtnJt2ePz2EHhqlnr5GSni5qzENXbPyiyHNO5fx48IUFjCPyfWy5TQwlosmffibVEL8TJCN4RzEdzQfOpOK6fKMsl6Dml/K6qoEgBWARk1hKX2AdQQ6rGNou3rIoZrm4/WPF00xn0iBSjqz3lJOf9F8wAHb1Eh3dPbUy4soZqz6WUwDx0PScqQdJsxAKati4HrPsvK7B73ZllDGDIXJJVuFF2D3YEujYZS94ikllsqpGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cwJrfLjalkVqOcB59VrbYHA5q80HWwBjA5NpOaMMAIDdVfS 3oQ4A4hxi/.../VZViIPEY=

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_en&type=PROGRAM&Expires=1439335020&Signature=I6yZ4dbzPlM4~58kG6bqDlLhCjyj3dj7FxrVtK4Ch~orb0BCbIh3p5wxQMidNXBISEedFEVcni5nDwUpl8nUuFy2Kx-rI51tR7-uSqnJElqwNDZ59ogMO3DAy32ueJINTIv0ePi27W5W3bYLTM1DQudTu~7QAdVm8FgGQDiD0ZY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_fr&type=PROGRAM&Expires=1476652075&Signature=Asc6HCOc4O2fvdQFiiBmlsnXZZ3qkbVk-Cz1p7oisUT8dh9~vQ20-xHQBQ053YxhlFHD6eTTEM1f1cNJC-JTED7qKtpTQWwWqx8bu1e33-CgZAbCW-BgCt7SXyE8M4CqG0~gXL1uPT-xEZz7ncJpwmfV8DVcQtw-NdUBH3H6DE8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

http://global-shared-files-lw.softonic.com/843/d15/.../QuakeLiveSetup_841.exe

https://quake-live.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMUnhv/i0wj45rzFtj1WTDheZ0spcbUM5sCuJpTvcPoY8oG/h 4N0frXTq7ulb0lXI1Q aD8 HAws2m ZM YchmDzMoU0aSieKruo/z 6OpP/2LS4mpwoDLo99ccEbeYO7PqnnvfO KqtIuawwzS J/Uz6A3XelPxurQRBVI9P8uCw4Y0d2GsKjiI8LL9dsPBxYazPtCAgqzjfpMruu2gnhcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlXRD8EKnT3UCTQXj74zdr3VV4NAkM8LoYFe4omn04Pf5husfszzc5qSMtgtIFeCmWvZb8m3eZxVi3LraQcaSIQSYeXwX2/EvY4Y9s nlAg1kxfe9xGjvE1JJa6BzpbwL3mCI7ajKjNnj1RvoqSHMsMCDdiPLOaieerBxNMctBAd0/MiMige4HWvfl64x6 DHwAMW3FfbQKnoWZnp8qtO ENGxZ/Tc1YCStCYNTokLQU/EhzenCesS3jGBfLa8qaV BGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cwJrfLjalkVqOcB59VrbYHA5q80HWwBjA5NpOaMMAIDdVfS 3oQ4A4hxi/.../VZViIPEY=

http://quake-live.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMUnhv/i0wj45rzFtj1WTDheZ0spcbUM5sCuJpTvcPoY8oG/h 4N0frXTq7ulb0lXI1Q aD8 HAws2m ZM YchmDzMoU0aSieKruo/z 6OpP/2LS4mpwoDLo99ccEbeYO7PqnnvfO KqtIuawwzS J/Uz6A3XelPxurQRBVI9P8uCw4Y0d2GsKjiI8LL9dsPBxYazPtCAgqzjfpMruu2gnhDLzlG/FCyzfqJLRk L6W47Ae110YqknqQyIIKE3QbQcKlmya1MaMLRSJ9OgYjkX495RRVbncayY0naAtXziy4O5Aw6ohmJFDfCPNI1acp1AXY6koKwVPV 1fUd80WjUQR7fHpP rovab3gYfKHA9 YB2atySjT1HJEl9/l3A0HhBemBbeTwM1mTrvvGBJhpmxNQbeocWBdQA5WzmrcM6GTunLJ3EAtUmGQIeWi4aAm qYrPOFanxYWO9qAWXUaBN3bco7Ix8f8RskEuxKlGNsLz8bIeUQzLeZVMBXVqK9N5GUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7cwJrfLjalkVqOcB59VrbYHA5q80HWwBjA5NpOaMMAIDdVfS 3oQ4A4hxi/.../VZViIPEY=

http://gsf-cf.softonic.com/843/d15/.../file?SD_used=0&channel=WEB&fdh=no&id_file=79340&instance=softonic_pl&type=PROGRAM&Expires=1456093674&Signature=geBcGXNXo271DjorPs8sRzjP7Ezv1C1AfwRUANhc5i-pMZneKsXUHSdYeSLgQW6BCJfQUXflJ3Wt4vFojRKZ6p2OralwLurwUR9bXAyrZT2TdtPj4cp7zSslc7d4RlWPzzcfyTu0NBJshvfcmXAjUzKao0w9az873bxhjy6j8J0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=QuakeLiveSetup_841.exe

Latest 30 of 60 download URLs

Scan quakelivesetup_841.exe - Powered by Reason Core Security