remotemouse.exe

Remote Mouse

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Remote Mouse

Product:
Remote Mouse

Description:
Remote Mouse Setup

MD5:
4515da8f990b19d502db8aa2fa7955a0

SHA-1:
24e3f9f1519fc795dd1cb417c9a6b8430d287d34

SHA-256:
e7cac3b19fc00e654f73a78aef06063f1db2cde39385301203d01127140f1fd6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 6:38:48 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0328
7.2.98

File size:
471.8 KB (483,112 bytes)

Product version:
2.53

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\remotemouse.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:CQiGPAqyZQ11WhCS9v+AADLmVDtmlKhC2Iqjzva6WXd55yGMB:CQiKAphp9G3XmxtmsItq

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9357

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file remotemouse.exe has been seen being distributed by the following 41 URLs.

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1481265096&Signature=aSqMqwxwpUBtsYw9MQW1gHPzsGORl3GLAp~lUGykf6s40zitCD8x0-dvN4C~wO2BOa27z6Z3oW6bUic48XuqpLWlWxBtRGZ0jQ5uLw3y4P8G7-D9fEKMXKHNrlD7Ta~g57UClvLP9b~XSITSOQxencMqpkTJPe1JhM8DavQA7qE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1470831329&Signature=c2~QVrNve-K31WZzZNNr-EAliVZq7c3Kcflhqnh8sFZtiHnK~hQsmj4y~bS5My1CqP3UPEd~cFnKWnvCCg0HGayQnQas~Jw5-4dPzdAFoowJNAonON7rLtMtK9kUmxeUw2DZWqZH5q5QpNfCtQlT3V6souelkMz9WebvHD0div0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1465410408&Signature=gkmH2Z8MqLIvRUmu1zi8Od8pGvhtvAlRrCi~JiDfrpq9Gp2kVdtQCbh3Ouowxhp5YPLBRWI2gk9E6UI3cnDapJoTf2r7r2kZd33JO4rf7-ZA58h1fqxrBPqF~NY7nXfsGfl9ybOmdgXuC06TczWVj3BR14Ga3JOav9HQ~Bsb~yc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1477559611&Signature=EFvfx~pwYLszhI97iuK2b3WjKe8iAblmmoDdAfwO3SC1mVu6gxDAmtaXVH1LSIlike5OvzCFAtQmkMQD5Q9RZyqx5HQapgFbNIUNCiyooW3IEBf8NuMBQF5Hq~5RVQ-P9joi8WHc9Ms8yaRDQLSeUBiItWtO4ez2rr18W1S1TzM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1429339048&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Re2M4VGyTZGBCJI9tiLu3SyouRXwRJjtZWXK-Odq08RySx~bdPeB6t3C8tddKx5jq8UXYkhJtC9Smyqqpmoy1D2tSihHlHhVZbwcBLl7ZSeoXgZePhWqvEEuAnQ0inJkgLDk47m6qsAGjjXzxwZpVqedKa9jC0sWGC1LTOlVsV0_&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1439299103&Signature=Bds~S0l8ceIntacFAOWRg7Xgtq4v3OsGwgBK-CA1c6vdCAIM5BInNoyNtApplm0R5vOYk0NK5jeACfLwxhECgIi5CIBMddgUY~JpDCqMjiRGZ~AQvddQyHPoSPtrF7ln-QcCmeeDhBoKrnJs-Dhv6Eb84lqn7Jo7Sc6TVO2kgMg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1476416078&Signature=A61rvEMM97wd5C3ADAuXCFFKG~m5gOKQAGwZo7VjxCrrsh4G1xWu83ix6LLqlMn0Fh-Ce2Gld1wtS1odQq7M5GyumpJnDB7jLvir9uEvOAKyUpOL-nekIr~WGJOr13FyJiXwaFRetXVsqp2O~xSyY-jkDZaofBiRMSjzvVXHAlw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1480166814&Signature=cJJ82~oIA1Or4-zCgUq2K2rn0Lzw0d8yBT8B~pbwLIFXWu5pPVU9T0UUNYpwNA3PvTnYl9VrohgQrrk1WJn8QAaxQ7sK0xmXfL0q53O~VDlHnYYlIqLXvPdQyGsZpkNJCxFPygPDq3dP7mjn2D8BsA6G-nzgZ2ymRa8ZpdRM8~c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1477746147&Signature=DkBs1wvP6yhqK5QxTtSQc2gue5x8k7ee6TLAf2cupWXaReacwaglnN5b72c7dt3~Iiy1c8AktHerMMAiSfqD2mANGpdHtoQQHarh0axJTTkK3N4atoBGivpON~WqsE5dSlEl2q5c8LErUoW0~iZcDHSFCusC4ujYnjPDLuJmXps_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1468921118&Signature=WWlBkOmBulZjT~vjwOv3DzsMt-5umhPcBvmAHTcA4i1Yl-tOEby5yDGQ1EKNqPlGiR2HaSzryWYANYwqEIIGMAo3NHNq2ghHMu6xSuBpmjbUkrv5TM6vM5UnlAcQBcaLdLSHT-iKyETjHOKiINDrjQG6mcDxSflocOwQA2hCZNU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1474269973&Signature=KtX3A5GtpMDd~vw5qLohw8parqUpYsWBzME9s1V-2Qypa8E~-XyeduuNUOI7mc91goZK~CPk~SxuMoUKtc23em82B1FJTiNoY1ZMWPPK4mlxdZr6GKIPEwE~80u996JINjtepnHv-UYPaqroHul2cLvlOnge6cvGzCvpjOzZwlc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1472529525&Signature=Ylx4FuO4o1kJlj4v7W3~0-Hbf52qH1Y~m-5ZhMILa4HXoSbI2w0xaZ7Kx5ot~6v~PPQfweyjGd3qELNUcSbRaxHhXIWhBUEsak~RfP6e82MBpAYTebU~EMLcvZm5C5A8ap~QAHFOWzrQ-FMNpRH1Re0mBTe38I0OCHH6jAsxLBg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1476116467&Signature=Uejr1dyBMsrfovFopu3lt3YThTf3qeidQuZ9ds99o6irZ-LTKaoN4b-Gr7-1RuUwblt9uHnEIgowR~HxCVaQZGptF8PFvFvl~PhqT~Hr-7yZGz35I5zaquBq6y2JYeErJR87SEjpzf0Pft4V-v9EJxppa4GmZYsKgtHLgZBNJBE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1470393988&Signature=Sw985VyuLQGyavzSH16IzV6ZJAcOT8IS15L6Weqc3SJTOmsKRswPvq-VlqwkIYicFsKov1mwZA0R2vp9QrhdKBzW2WQyHNc1-dIZi2Tyj4L7ESy~msZ3wqKjgMA4uBklZAOdi221u38WF63dzES8dWK~08I8dJyI-3rtvm4hQnk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1460737642&Signature=C0zPO-ArJIhDahyut5~XxvyyoT0UxkHswUDuj50v7QisLuO5RgKXmACT1yn8owvL81LZEpXc1IdyhZUWqE~F8MqzC0vRhT03yL1BzwxbrZjm0iBdcDHZG8LDab2b3HO~07Qxu3PTPFYm-DyDVy0DPIT7DQJj7wVGytR45Nsnehc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1478316104&Signature=A1J-i5hEL4ecaTAT7l1w9y2Txz3MTSTOmu9lTEFH1mzt-g7fGyKdeK~yahafx2~wcz3PGchcpPiSezCRmwLjVWVaLyO9XpAPDKBJm6sM3l0Z2nUeuw2E9sYQCRKdV8TcmC-n5N8cwTlOZNZ4Ey16C4Vp3brjp5Td73UbLhmUSdo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1456111460&Signature=OgmzeYcUVicHvTNDOqRmg5cmPx2mhNd5B9G-cxbZyqq8Ad8Qa9gMjAUs-ax8pPLdx~LL5YPlT810lsOtsKSxeatu9nroDOmv0iK~xBGY5H0T5dwoYjWY1ulpckRq3kYSdiOloYLUiBH0mUUXSYQ7iL-UoqprIEDVRmDUSqmpCX4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1479215306&Signature=K9sxErqzA46cekG2hEPXT5JLdsbNQFlFu3753KzfVaOQnDje0VJy~rN9tNCEKdbZjx21MYr8uXRW97nLs6QJoWISgiRaJX8xonBxc8b-sSc8H7nULnYaHMX3kshdbqrzkIK5jnwgk6xms8JB~dv7DHpnHC2Rx-p22H6hLrF~E~s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1473113996&Signature=GZW~AVrpblBBMwcNDbnT-E00J4QNbvb~LoKVZEf1i0CLcbCG74vOT~FJszuSeVkuXQxmZPBBPJbgoRGZ79QFKTYnWtmG93wkfx0qUtcm6qxgzDTf-XS2xic68Th7d6JYxesgmX~6dceJXLmi~2gRm0JXFWRwPiEmGlbSRdggBH8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1433349111&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=X9gN~saE3Ctlo5rdB~5XmUCAL0kTCHvouAIRhigFsfZFJGDcijrBqgyYDC2Ijub7lpQuuEcbtQTph1y4rTUfTtrj75rx1RJryY-N1VcBc8VM3E~duNX-R2VrT9QfY3YhF7dBF75EXwnk5hXLcQepFW2aA0WjzAD01WshVX2w8LY_&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1440812858&Signature=gLgt~xsxTW2DXZaFF3gzpiDG2FgCjhXGn-F1D1x5kvlu8PeQl15OGXwlAlN5YCGhx~IzO4DefAV4TLGI8qfZNlPpKw-TkYUN4opU9z-voWi~Pw6UHJS1KubP3cf6--QH8FDPCAls4~dLtAl0j-~k5fzqPu-bYPzYRFQvF~idEM0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

http://gsf-cf.softonic.com/24e/3f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=316800&instance=softonic_es&type=PROGRAM&Expires=1447228343&Signature=KWwfD5BeqObmzTjkQKh5sxm4cY0zmKhmQF1JABSjKRY2gBWKSw0XzU9y50ObNuq-JbA8gFgBSjJj1GKeJUgvQbcaw6WiQtPlP996sInuwthxzOHVghC0ZouAcucPgHi3jrVZNJGiARSzuxm7oU8~Fyec1Ba-bPOJMdBg4SykPfI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RemoteMouse.exe

Latest 30 of 41 download URLs

Scan remotemouse.exe - Powered by Reason Core Security