home

santasetup.exe

CDV Software Entertainment AG

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
CDV Software Entertainment AG

Description:
Santa Claus in Trouble Installation

Version:
1.0e

MD5:
9474eefd60b0fb578904a732fe00b59e

SHA-1:
24f9809fa91f66c99c6f75d5a65d563800d845a3

SHA-256:
4c64ad9f43335e434a8410e1f36adeb8c4ad738874d9bd57627cf8b2fa6c5829

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 6:56:57 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clodd1a.Trojan
1.3.0.4613

File size:
9.9 MB (10,352,284 bytes)

Copyright:
CDV Software Entertainment AG

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

Common path:
C:\users\{user}\downloads\santasetup.exe

File PE Metadata
Compilation timestamp:
8/13/2001 7:13:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:xB4Dc8slN+ZOIqSltb20Q03MTD5JGjgyU0Q7MkUG7wmYKT:McVlgZNTb2v03+JGjPU5MaiKT

Entry address:
0x21AF

Entry point:
55, 8B, EC, 81, EC, 2C, 05, 00, 00, 53, 56, 57, 6A, 01, 5E, 6A, 04, 89, 75, E8, FF, 15, 54, 40, 40, 00, FF, 15, 50, 40, 40, 00, 8B, F8, 89, 7D, F4, 8A, 07, 3C, 22, 0F, 85, CC, 00, 00, 00, 8A, 47, 01, 47, 89, 7D, F4, 33, DB, 3A, C3, 74, 0D, 3C, 22, 74, 09, 8A, 47, 01, 47, 89, 7D, F4, EB, EF, 80, 3F, 22, 75, 04, 47, 89, 7D, F4, 80, 3F, 20, 75, 09, 47, 80, 3F, 20, 74, FA, 89, 7D, F4, 53, FF, 15, 6C, 40, 40, 00, 80, 3F, 2F, 89, 45, F8, 75, 64, 8A, 47, 01, 3C, 53, 74, 04, 3C, 73, 75, 06, 89, 35, 58, 53, 40, 00...
 
[+]

Packer / compiler:
Wise Installer Stub

Code size:
8.5 KB (8,704 bytes)

The file santasetup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1482466614&Signature=F7pdGO~Q05CT-J79gvtbD8-Ix3-O~1Mnkots3VihfLr~0KJa8gQCTx33uq9DYDHYn86kOjhWrcKSGO~aLGFLh2WMlSLVb6YJ4N7VZZJe-Uo7zrNSPZmWvm7KAeqQpjtEFtVxth0OjCDqtBNZcsNkwIiBtMavnLnxuLA2HKnQFOE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1483000865&Signature=YUzOBku6z23tuswI7i1O8NC-4QSs-qptgh3YVZa3v5mc~XZoQ2oCpcbWjGDGnq2DskU3qo0ooZBbEK8a7pYsh8e7t3jJg7iYBCpeAIAmemDd0uh7YKVpGcPcJzT0SKtYCJRQLf3WMfIMbs-nlXBJNWxAoElo-2-6bUM68x8x9xU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1483046176&Signature=DQIUS0EUr~gBiZKderyDXLSUJc5BbAHITRPC3da6VlOeF~U3gqLOvR1esLM7-ZconaiFjiRzLX~byclYc9tVEU62OXbWtachTWuD1ufgQOiSLNTXmSoo1WJF-RtIMKN-yIxkCS~6dGYjkJac~SRI9l1d-Z4mWQOM3trOi-lrZH0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1466372094&Signature=G-S0mtLSAQBmyDj0A6En28PCFGixZvLiMHQPuXhsle7bMaI5b9J2cKdZGqjEhSc5zyqgS2jBhTbLSSLV1Ym0G6Uc50cuT2WT7R0mH~57Q5Tcc6m1sBozygzeExLl7kO~NDyr2rymJ7IYbcn5iQcH0gqVNtINx5zI9A2FFnSlWDM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1454181116&Signature=RwzgYKfF-b~4Px7xPGdUZvZfTbMAUFIHr-2rd-kX1vPX7h4-DDe4nzkvGt0W7uFxuaYUWn5-zlKZtDx6SRSnOmkhWr7xCirI4yaHIGTJdXihOpSyTdCdRFMCMpyqq86xct~LowxMLTk1xnd-ovwd0nFLts311vpCuGJrvTOep8Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1486362818&Signature=TVIVBIiWKjm1Mdyt9AGYEL3ISuQnOlPUavJG2fVVtI9rn3azgvjGpAGRQ15T-nU2GSvmkzLtln-zWisrLYXmTNnGzGE1jLw9-n3GuomVdmC8ULS8Uyq7V2YCAfOx1sm0VEdjW~LIfYnhLfw8dyuktYV5SHcLPZ3P-Jg9~~58y0g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1483019416&Signature=RjFtCoo8vjCSSKUHL5Jd3pGOx3umcYMpjPTmHw8E-xmU8nDSL9uduQQr8wzXLSzl9dganmeCiPmhbYMYEaUCwlE9Ik9Vh~QcqWtLPOOOF77SPZ-51StpfatK2chLTn2M43P~LqDM4OnomLVIqT0NWioxZc~LRdhgcJY~cPh-~Ts_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1468209636&Signature=THGHO1lLquJpFKtIOS8ck-iW4UV1FDrWtoN2T2Tm0hRugKFINBHzOcHYRHN~-Tu6xIjsS9OLjZaA4KyCSzNXRR73xzqEq53QqeS9GBB8ABkyXcidkP~BGXivOCi96jCQrmDJ9fKYDxnc0DD1YLKjqFgA2O~Ny5WwgxdH0uXVnJs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1484000971&Signature=QbnXS5ja6WN1xOLsbCHqSrmCxIigBd0w33UOU81h95iuJDO3Si5e1HX6ybC5mx0XnVumIVWIIVA6oBVnSxg-I6uhCQ-mD6RS5UTKQ2Vifm7c9MrGX8cSLfgwipOrhdnpMARLYIOVCpvfGFnNEppAcvo~ZuvwobINmyv3Tq8lRmA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1483216108&Signature=Q7ATjEDM0fA9EfHSnuAT4Ku~3at-QHn~HMbbDXiDbJeMMOYyNhojBOBCV4YkNfageQ6VokcDYPbmRV1DiCfZPK1f1vFy4m5gvWWP86Jjqw0S19vX0retWS9YGTcjpmu~ol0fmQJcW~X~0qK5LDd~Cw46isQ9CyPIMtWvLLwU2lA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://storage2.dobreprogramy.pl/.../SantaSetup(dobreprogramy.pl).exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1486435795&Signature=FeMMnhiy2uvfl6yQaAL9r0HllWMHu51SVwpg6m5wCjrQaG9JIv-n7skZX0UfFF6Y5wUFxpqsPjJLKasVfr6qyDiBqj6QU76lK9nDezGw4Gf3P1u3pFitg3fAUIHhjTcb-k8dwYXw2vU1eskIJolUFd3GOPZv~sNBYWTMV3l3fDU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1479695816&Signature=aUOAfARqzePNW9RcKpN6YK56LDAeWccAOHRaZNGCfo1gPoqoxGs-Exm2ZMbZWYu93G2H891652KzYI~eTtdoLPk4lS-bItp2N1ZRmfE4415IZyxcVcQxhStOnI07gCWACQotosMvJRGQ7iQPZgkyJrUP-8nF3OwtyuJdQn557js_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1485668037&Signature=RGxXGEu-NLvEV2prO7HYASrmBWXK4P8cHarckMhNUT1HueR0KoOoJ6GlXXCvJuiiUVk54NPcbpnYwpIC~6PbJqkHwwB7XjkHgO3jYKoj5c8pAO6AGKEGEXBdJymVVC1n2lBsNC0vhLQrztEII2qmNexVdTdq4vxOA-yYsuSJsOI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1482815144&Signature=OVimt1Z4n-FuI-RTN3MeZRZibZXfV6~A10-tOSq6FNoFoqNUfQbk527q87h~MuJpkSz4f6QmuX8VNwAqk206QNbv-sz~dS2CMo40TXdOtMlj-oRe0qWF9MR~Xo4z2A7VHEugnsv8wGfJ9VaPG4ySXYCzs4TuekmGN8PXeOayWRI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1463114945&Signature=C04HiYGSNrTzz1MAgsGmL8ElgHNJeAn3DE6HgsLkXVciFTvwvXinAzJnca1bA2FI3HqjaD02I7Km3RUA6XMMXOB5BzBojvIAf~OfBLDdh0IK986-C-IFX7ueDD56saLfVrCTt4Va47bPw8EbBDybibk9SREzxZrnwc8QjB05Vsw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://blogattach.naver.net/148108bbaff3f02c02ee85b58a651468cd956683f6/20120805_260_blogfile/.../santasetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1483855670&Signature=OujP-vOu7nwmClh~LInAlZXBsS1yBRGofGtnw9RWpOlGiSNdgea0Cn4ynqwY75plGS68WZmqm8RsFsmIE4Q4n8l6mrUWJZLqZ16QebjL-hHlI0O5y8uNbmi63dWaczX9KrePcYHidpMzk1vrlHsM8E38jtkbgMiRT7cu6Sa9zDo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1481415808&Signature=dF-ciPFyg-tW6KlWCSa-Dv12bS88rSZImIuYZYZlUnyEmvL-tmINxPRPwHE1LQ2a0V3qq2wBbL1Dqe5TYSmppf1DHlHIMGYHK1a3JfU5ZhzusHbYkF4g~RrDIMhbOH8gsOTGdh7QYsY-a~u41dsU1tnhHasZ3mCQFlJOJdim0jM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1482837287&Signature=XeW2~WVILVFJ48FhWJzMjdBpdGRax1yKA3Zj7DLd~IL7pHE7NBtS~isep~X5~OitvHj2qjWQhTMNPa~~E1cb8JkOsGlqzO5efj8DzkAWtsDWznTO2ZeZWLnnR5RA8UH0W2RnyziOmDrpFWcirJ8uvPehnK3FBtizvc5RhSPi48w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1470913702&Signature=fvfzlQIjz9SPmOLgq8s0mYNOvKlGi8OPdbR2rOa94-AxhQnqKzCaKWEnyS5gl2N~jhyPo~zDPgVQW3aBZFnq3evodHtxqrTuYOIkL4qKxl8CZBGET5~Pj2u3mV~3Jwt3ODobQwQNKm5Jxr~KJuG4Q-5UA6JwXtuzxV7Vn9dRrmA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://flash.jeuxgratuits.net/.../tele/1146/.../Santa_Claus_in_Trouble_PC_jeu_gratuit.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1477242742&Signature=OCKa9v5bHjrVbE8wuIhUodpO1aWB2A9htoUVahr8hUF2Kl3NaJY4agp36cgWBw4BwIzrXs2lsXMzjgx3BeQevWcHWIMsZEWSBbA6XStr3DEbDXUcs2hU~PG6MZ-mtfPR7CB5EK8VaqbaNoIheM731lOlWtjs7r0ORT78~rNs1eQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1459115361&Signature=Gklx4aMk~A3P8geeAZRJxYp3ld6LyhqddpPKIQ3doogEj1qxVXeIqbj4X1YruOefTjHrDFySCjlNCAkxK8btS2R4bZWMsb9mG9J3QYdL87r0XIJtjVb7Ll2U64kw6YjKf1~cGq-teGEaWRGzDErXzxMLObUYZKKkdsUzGvb9UIs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_br&type=PROGRAM&Expires=1480589003&Signature=fTfryWL~1c5eVOD-h~JDXrovC8rzfG~DfxKeeCpgqo1Nfcj0ISxVSawirQWiOm-VUED0CqpNfeghMUQCgFeoAEJUj9kwysdT1o-RwpBEYzQNG-Kcp69mwi~2esf1DJKe55vLDe4UEF1cKDhfsfkKnL2es4va59zeftg60WQIUm4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_br&type=PROGRAM&Expires=1467794523&Signature=Yf4IMca4bQ5twPhPRgmiFGB-SIDeKyrz06N6L3U5Wo5bB2KG7UqPPdZ~I2Cu-ELy2gVnfPFjKjYyPCrlRBQ7KOF5kq7FNvaxf784H6w07gJbZLm~JNWdzTo4XAxBMJpmV~~LteSR~GVfKlhLfd8u2Jc6hSmzMTPbN4DLYCZcb70_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1453704127&Signature=Gvczf90sbWug7q5kI4qW5MFXB8Pjj~T-zUIVfaowdOAdE~Ds8kAd8YTiarsv~24pH9ubVVgXPTaptPgAQ-5uORIpLxi871CNY7k3xUL80U6QDF~tWruKZx3EfBTgIllJAJNPnGvZ9-IAMlUfKEyif0l8xKpFV-nv2kA6Oqs6e~0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1462655183&Signature=ZROF-ePV2iYxKF3Oo8ZbrLWcq0~PoSeBJXmVHrQqoDaANYuFplm2YIFziy15VXhlkydAm~fAFlX3mZnF0C3g4yoFVWJPtu3LyzOg5VAVqpYWkj1g~ESl5617qWUM6Evjdq6Qa8ux02lunCSoZdK9cZnsjo6C6GYkzI8UZuocSqs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1479006922&Signature=Y87kQcKAfHQlUicxWCfCvytY7i8AdiE84-tgQAF1gRgGpWiaFf1oPwFjxJdiqAdjlJTZgBDu6XbaAAxOW0uY2FihoINFamZsDQJmqd6wBc5NBTRNokejtisJVPdlWBv-6EoxxHCOFV0QbbCO2W-DZhMghWGv4HfzbvYLYHHaNbs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

http://gsf-cf.softonic.com/24f/980/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24541&instance=softonic_en&type=PROGRAM&Expires=1479449392&Signature=Rihr6biq~lKIFgSIDSsR~vP4jeTcu2e7USZQyUL3SgWA-VlCt1XI4~qkrRafKdNFUryGbJ7Uw~bpUwy8iySMw7Dhib6ysbEDlgrUsxcKv5qjPqY-nrK-EZ3Rsc~jS6a6wtx1f7RdG6acXbA7DB6Xuo31POPP1Hzyf54IH4Nao8o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SantaSetup.exe

Latest 30 of 155 download URLs

Scan santasetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.