home

roboform-setup.exe

RoboForm

Siber Systems

This is a setup and installation application. The file has been seen being downloaded from en.softonic.com and multiple other hosts.
Publisher:
Siber Systems  (signed and verified)

Product:
RoboForm

Description:
RoboForm Installer and Uninstaller

Version:
7-9-18-5

MD5:
5001b61e8f4d41abb43b72054879d594

SHA-1:
6bfac714da2e9eede09e40a3545c14da9cd68b05

SHA-256:
3dd0c67c942893f7cf3a0133ac7c1a5cd9da21abfac980fdc5a304f8b38be13c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 1:26:29 AM UTC  (today)

File size:
17 MB (17,814,768 bytes)

Product version:
7-9-18-5

Copyright:
Copyright (C) 1999-2016 Siber Systems Inc.

Original file name:
rfwipeout.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\roboform-setup.exe

Digital Signature
Signed by:
Siber Systems

Authority:
COMODO CA Limited

Valid from:
1/18/2016 7:00:00 AM

Valid to:
1/18/2021 6:59:59 AM

Subject:
CN=Siber Systems, O=Siber Systems, STREET=11781 Lee Jackson Hwy, STREET=Suite 380, L=Fairfax, S=VA, PostalCode=22033, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009D78FFC0AE13DA68C1EC724B07F4D5BB

File PE Metadata
Compilation timestamp:
3/18/2016 11:12:13 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:vIpYy9pwUKnoAnE364MM6NaevNl7aMObnWcGKLaKK:vIay3/Eo/K4Mdr7vOzq2aKK

Entry address:
0xA3D37

Entry point:
E8, 5A, 9B, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 51, 51, 8D, 45, F8, 50, FF, 15, 88, 30, 4C, 00, 8B, 4D, F8, 8B, 45, FC, 6A, 00, 81, C1, 00, 80, C1, 2A, 68, 80, 96, 98, 00, 15, 21, 4E, 62, FE, 50, 51, E8, 31, 42, 00, 00, 83, FA, 07, 7C, 0E, 7F, 07, 3D, FF, 6F, 40, 93, 76, 05, 83, C8, FF, 8B, D0, 8B, 4D, 08, 85, C9, 74, 05, 89, 01, 89, 51, 04, C9, C3, 55, 8B, EC, 5D, E9, A4, EF, FF, FF, CC, CC, CC, CC, CC, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76...
 
[+]

Entropy:
7.9610  (probably packed)

Code size:
773.5 KB (792,064 bytes)

The file roboform-setup.exe has been seen being distributed by the following 30 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=ca99dd99669be13ac8a2e46e713482bc&upv=8db9dd0a7b15533e46f5fb01efbd3906&z=results&sk=0&abp=1&params=F39B2A32BFC101987B1458170C278E03D51371ACBF333350B5E3C46B64D50D2C836BCB7F603556454C3026C13C7E0E8E7CF03702CD0C0D24890E6610BA4F49EAD26391EE526BAFA8E1E08895E3A413A2F9CD42DE4AF3FC1C81D14ACF74A659B37FF6854A3818844C5DA24D8CBBC8856EC52D5773ABECD43BDED15739D64F2675F984F97DB72B67543D0A2006DF91D0189E40B23A8607A7E89097D17C591A0150&h=61E2577703AADEBC442A25E5B95615626005E19DD887E5145FC003B9EE3E4C72&directdownload=1&f=12369&d=http://www.roboform.com/dist/.../RoboForm-Setup-sof03.exe

http://www.roboform.com/dist/.../AiRoboForm-incor.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=24e34c302b2f60d19e01506b03433c07&upv=d0c9f8685a027ecf2c33826a91293934&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E03D51371ACBF333350B5E3C46B64D50D2C836BCB7F603556454C3026C13C7E0E8EB9AD3F019C4E5BFE6AA832145F9F5F8A3467F7EA2511C9C93C4D3B6C4F2CC973492493D7578DF346D6D9740EAB5C5B9304798933C5CEC902DCDB247B0A6D0555768136232B62267FC2E29150EABC5DA054091417CF96D16B74D4B36792C089584FF77498E4E5C1B1DEFB6CFEB2D59E45&h=0C45FD1265BF47DEF6ACFFCFC0B01A5B910D88B9E0978ADC66EC310056853AD9&directdownload=1&f=12369&d=http://www.roboform.com/dist/.../RoboForm-Setup-sof03.exe

https://www.google.com/url?hl=en&q=https://www.roboform.com/.../RoboForm-Setup&source=gmail&ust=1463713100658000&usg=AFQjCNGez027Rh5XiXNrL737NjxH_WiVkw

https://www.roboform.com/dist/.../RoboForm-Setup-lsm77.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=fe96548fbe35e8828cfa27b90967be7a&upv=289abe690b18b442b5eb9389c6b66853&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E03D51371ACBF333350B5E3C46B64D50D2CC5636B89F2A96C5404596496594A37E718A682B71FFF4D361A21147DA348BF83B4F1EA389627519FA35476FB48F5BE5BA7A68C0A1A2706A88C42B4CF9720FD00327F302FFDF04C67A09CD1E347C5011C4A702EE203256522FE5678E81523C4F9077F0D9B2495D93D609EB0CA937BA612676A0A8D1B51722FAE8EDBE6F3E4202C&h=53739738E56F123BB5FE6111C277B97E2EAAD42D49685EAD9E60EA1D7FB1290E&directdownload=1&f=12369&d=http://www.roboform.com/dist/.../RoboForm-Setup-sof03.exe

https://www.roboform.com/dist/.../RoboForm-Setup-avi01.exe

https://www.roboform.com/dist/.../RoboForm-Setup-12e11.exe

https://www.roboform.com/dist/.../RoboForm-Setup-12w04.exe

https://www.roboform.com/dist/.../RoboForm-Setup-wform.exe

http://www.roboform.com/.../AiRoboForm.exe

https://www.roboform.com/dist/.../RoboForm-Setup-int16.exe

http://www.roboform.com/.../roboform

https://www.roboform.com/.../RoboForm-Setup

http://www.roboform.com/.../RoboForm-Setup.exe

https://www.roboform.com/dist/.../RoboForm-Setup-hotbo.exe

https://www.roboform.com/dist/.../RoboForm-Setup-12s01.exe

https://www.roboform.com/dist/.../RoboForm-Setup-scm04.exe

http://www.roboform.com/dist/.../AiRoboForm-a1949.exe

https://secure.roboform.com/dist/.../RoboForm-Setup-ffbn1.exe

https://www.roboform.com/dist/.../RoboForm-Setup-11ems.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=86e3ee79abed2ada38978c5908ce3396&upv=e1e3245d447a270aafe460a37490ba8e&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E03D51371ACBF333350B5E3C46B64D50D2C8EB26041D4B586BD8FD72180D3F3EEEDC2EF2CD4564DC25E18E3A280C55DA1D56C5E64A6547E0DE097397DA8FC9EC0B900F29945BBCC895D302BDD1554AA62ECE58FE5031F4B414F21101F9F295A4B9FE2E4A61E6964FD59331B3DF675A098C09E93CAA5226D64F2814388801C09AC3E11F0A8544C26617D03129F695393D02F&h=4B77F67EF628946A7296D713B422E9F24A80AAD542507972072CB083F6A52594&directdownload=1&f=12369&d=http://www.roboform.com/dist/.../RoboForm-Setup-sof03.exe

https://www.roboform.com/dist/.../RoboForm-Setup-12e00.exe

https://www.roboform.com/dist/.../RoboForm-Setup-scm16.exe

http://www.roboform.com/dist/.../RoboForm-Setup-a1949.exe

https://www.roboform.com/dist/.../RoboForm-Setup-scm05.exe

https://www.roboform.com/dist/.../RoboForm-Setup-12e01.exe

https://www.roboform.com/dist/.../RoboForm-Setup-irnsc.exe

https://www.roboform.com/dist/.../RoboForm-Setup-10ems.exe

https://www.roboform.com/.../RoboForm-Setup.exe

Latest 30 of 30 download URLs

Scan roboform-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.