scratchi.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
87522f428fee28ff804ef9ec8afbee03

SHA-1:
b786476fc51604d5478b2082c6b24c63fe7c7109

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 11:38:53 AM UTC  (today)

File size:
382.8 KB (392,006 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My software\twelvetone\scratchi.exe

File PE Metadata
Compilation timestamp:
7/17/2000 11:49:56 PM

OS version:
1.11

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.18

CTPH (ssdeep):
6144:TTVZNwRXcHxehoZ8uQPXufN/TmiCIXHIEbxWuxnjAaRu5CCEfcC01ci7:TTNwRXNBPefpTNH1/xMak5CjcNKi7

Entry address:
0xA174

Entry point:
E9, A7, 34, 00, 00, 03, 10, 40, 00, 57, 41, 54, 43, 4F, 4D, 20, 43, 2F, 43, 2B, 2B, 33, 32, 20, 52, 75, 6E, 2D, 54, 69, 6D, 65, 20, 73, 79, 73, 74, 65, 6D, 2E, 20, 28, 63, 29, 20, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 62, 79, 20, 57, 41, 54, 43, 4F, 4D, 20, 49, 6E, 74, 65, 72, 6E, 61, 74, 69, 6F, 6E, 61, 6C, 20, 43, 6F, 72, 70, 2E, 20, 31, 39, 38, 38, 2D, 31, 39, 39, 35, 2E, 20, 41, 6C, 6C, 20, 72, 69, 67, 68, 74, 73, 20, 72, 65, 73, 65, 72, 76, 65, 64, 2E, 00, 00, 00, 00, 00, 00, 00, 00, FF, 15, 08, 74...
 
[+]

Packer / compiler:
Watcom C/C++

Code size:
70.5 KB (72,192 bytes)

The file scratchi.exe has been seen being distributed by the following 34 URLs.

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1468625371&Signature=C2ZPiFWEXGC2HMUACaJPcytAz7guK4eXDS83KmR5oo9~UI84rHBnmxys4Xv-kc3gGmrcesf9SoSXCXIb-~DhHt2m3I7wBpR~kspqm74Kcq9Mqr3iS~~SCDXIv8zA0JdFv9-RtAR-sw4mmSqhRceVJyltIwmgklp5J6e7DQogg08_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://www.bitsfarmclean.com/8h1MTiueqswMAZcPbS3fs0qZl4s7iB_vomKKaAd8laORC112GRAvlGtjutNMWwJfaHYDFXzZEyPLolss1CdG8G51bnsBjifo1D42TbgEXG_jM9Lnf8HTG2nQ9 wf34mGdLucgEkQpWvhl5HLZrAWuczEGve_Uqfj7wact3_cLyQCkHKcjCxUlVny4uEvnWMS9qh7eAtT-G04AAGRgnq2tAWhks_8mRJRZVJLZ9jk8z7EEfKFx2_ZmKXriEL7rq3zqAWr_rXw_4tTohsbcezwZlOcEYL4U_t0DrYgSDI0iLIuw

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1477336096&Signature=dxotmx01wfxS--yTEZLaoSLkiiqyeloLXo3wHjdN1AWaWV-8ihV0PQ8yw16P4c2Dj7N63ADRYPNW6MbxAfH3ILEa6CqA8Hj~3WXVKiBJTyus89x3va8oVGTpBvKFqGDGoQNsj7QnzTgNq6Nd0lsIn3PfCwJjzoQCP-dTZrzdnPA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1482257873&Signature=NhMyamY~30Tb37qVxMWEFrYzCZK62s3CpRqsm9lsEDxVH3JFPg278bwcECr2OW-BMXHP-Q82HocdqxRMeLfy1z3sSSzkSQV1NvjyoTGjp1cHpr0yIKMz9QTRoHf9g4AOpad3hizJLLoX4aPaLUolg8awn1hQeffqJ3zAHlsZaj4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1476042457&Signature=UZ0j6rbHfAs-fMdYKhtz2xykALD4mwC86ukNqA-u712WlA9dEHhyo9WYXAsfG6q8BuFCPWlaUnDoeF1pTGNExYVgl1oLL5C8G0TWRpYS461MByaJxWOeDUi269~2okuiWrOBhPr1nDtS9qXsEzT-4gC7oumbnMODNI3JJYNnkuo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1448022622&Signature=DxQxU9X44wrpXVYo0sSUXkeyXNcs4Jnwls9IG9Kbnpu2ty6cIudRRdHTtCTuX5yqSxTv1vu9qOC5kewCZ2y97YtHlWTeF0Q5-JQgL4FQEhK3CemFL2Ink6q9QxN3K~JZoKpkxsMdgPqvt~PLKRLySr881h8BD-ksXVFNtxnrwVU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1479612323&Signature=fEe61l4oqYIpC7orTGkTQqzJurQMCx2wBNmTmWvPi2EVkDLEWrHVcq5Kid6NVz7Xbh3UcATm3MHJAEqklMmyTI6o0LBusdD7jZbE-qymBgD-TCqkwrGysHKRElclELfqHokTrG6WM~ZxdaTElWPKFVA0nzm7mlAm6Lvnuj6G0Jc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1456480022&Signature=WxHuKIocrkt041O5is8F1m~uDFmnNVzvsfe8NouBfZYsNMTx~XFanejjF0xwBfGm97DpV~qMfHz26c8-3Ksrdmw1Lwp1N3S~k~ikzcCw6NtZUOh4ISXseJIgGoHHHyBmGVxiZbVu3YWx44P5AU9yuDvMn4Ouuce~KjJQEgErZVE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1479760259&Signature=Bug-UpzKvsCTGVm3V2ERLlQpB4R5ICBLerNfa6QOMt0d~T3ooF5ArBcy~bFfE5yOn~2NXYBTIsy5EsLfLQzcDRSfhii~OkvQKziSipcCXWOCImV08BaGrzoaXb~08B93LBIZxMUYhwlnAOfOk~6duHfl-tjW2weksCv4-7XnU00_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1476766873&Signature=GiJM2BOJj9CEFr9CP7ENhLiiZYQpFuTi3lV-GfVU9yAKQOHZBEoLmzje9Gi2uLnHgCCnrTi90Rh8CvbyIG5r2vJhVm6DDuB23X2C1A2QIgnSW8dNlAbFgnntAskNzgI40rxdVujWh9V0wlVQlgGblF8w2XmHtTR4kSwMRDktVqQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1460958549&Signature=TMnRt-CRClgLp2QtfjFdzOEPfYZ8UReg42H3f2Cm34902fNzoL-FrpvsgfnBpJf5QbUlXfFS0Nc3Hccw7192plMY-nccOUg4OOwSCAL6Ikk4ufGPW56DGxTYxlpesyrPvqqRIbbgBdLZ2uKazQ8e2xaYFsXPfTHoCi4SwRZ9jUM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1477444623&Signature=FpywZFHCeaLuhX4TLk6F9iFTnMyCT4USvuTbp0uLeYRSmXr7HnISElJs8Xw5Y6lPN6fVB-dee4LTLoRRgVFInbUXPPhD0sbvc8q808P0YFxy-ulRVZIXMl4jp1LyrDzaJ2XVzZyRVwbuIE1-Wr2MeZ2NLJT2Dv10POZDRvwlTAM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1477911094&Signature=UDpMF~N0WGZhg9ypYSHCG7uAC4l94QTf1HAfSy8T3GC1K5fIE5SylHXV-SehgwlL2NP6qT1KPV3LZ8aZkIrYRX0ZnZu2-PDtnKG0A1~S5WN0s-gf24Ao3zqq2NQ0gO66AEFbi0xxhCVC8TYla~58EgTozt-kXTMBAex6FFwLQak_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1476855970&Signature=SRQgpB5w0wXfdrLe9el2ptksvOOvWxfN4ArtZZAdmGzlX0q2p3hmvcR12IMRWgyFw43etJQJHQkXMDenQ7FSiHJqPMMpCclXObXrpwpHLGB2DEwpGHf9uO5jWJTmPJRnZyPcv5XtxqdYVm~I-yxzGftO9oC5fBwf9G~o3CEivZY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1455164645&Signature=chRGu9fisLc7Rl2GaYaKGaSYllKXAi40JtNuafkFjxnWLoML8jKmIAUV0Z1s~CpaJT8BySL-DEv551AVWXg176Xibyd5~-RJcbN9ala5wC-aHuCbE6sNeamImRQGRPD9-975-GwdPL~T5zLsYCjBB4a2eqcvkDQkMFiZxDIEkjw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1472325994&Signature=Oa663crhzRigy6Ukm5-s-j0lGrdle9k3PTT0tlons1MVkelV0sFL9sr2cpFQH2HKdXZXQBRWiFmGL7GORC0rEmeMGVnavcYn4aSnaDBmlnYlhDwY3FWrwZjs2Dt7lYWz8KuZV8lKw1MKGUYDiL4okgY4heGUAN~BN8AomhS3bsI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1478479444&Signature=BnvMtChnXEY-jTuhTCrmzOL3fFt8WSSUAoTjGY4XuVaTqftwmgzp5bOM9tPMVfP4yYTl34oM47eV3XUkQnah05LB~lSwJnanLnGhC9UFSL6YxNfzvR7ugvlZ2Wr9A6kg43ErxAoUS8-bgpTqj~9a8AL1wsH2RdW~GFrKmlb20Wg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1456618261&Signature=Y0teMPjYeHg2Lz-gAfU4UFCPCoDREJFqwZS60KwaWVMgELMvrq7MwwEkPzpm3W6FHKC794hSO5a7aYrV17RXRJOP89q3cxza8ifpMDh9EcxEV1-luoGBkqze6QmRoMe7qbXbdgFnNvOhhUlmwh~bOY7rKrcqpRfdiWi3Y6A6MZk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://www.chucklebulksigns.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

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1477318041&Signature=KAcEiRhjhQcdo40O3WKVQQ3R9b3M5EM0ocRB~KNH5Gbzq96D5gnrnE08a767fAn1Wu4nXJXsgqCZzhN0EaI5rKF1jmm0r1q~hZ9GUy7fssu5994sHLIxOL7zQHYYp~XVZbUsG8J7K5G4JFthjFNeM-FY3uA4X5pFa4E602dKGRE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1470152902&Signature=XMJ9HgyNdCWjViRpr5hOWWIGH2RHB~xVQEcosoqGQ08ahHU-uqeJz9j0atxAHKCN3xa1RDc4IHYjU4VV3Q2vH2GUb2tS8C1sHUK89PKgMITshhUsA~tPy1oPfsUb069aUA6tYMXLOpNHUaaevvQ-8ForbPs3b2EEE1VMdMm3d84_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1472554128&Signature=fHX8LMGESBsG78KBRuAvkYydt6jYGxRbI1K7RpzKolL3A7Si6XudUpM9NaIOAbB9AICtfuyBkHhHE5yEV~R57NRZfqMt91NHVZfSGIMIuWoQrtbTWNhxIfaxR9N-S3paYGsUE8V3wTE5ZvuBCcVXfDch~DHrrYYYYvYHjVmFwXA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

http://gsf-cf.softonic.com/b78/647/.../file?SD_used=0&channel=WEB&fdh=no&id_file=48997&instance=softonic_en&type=PROGRAM&Expires=1450836543&Signature=GRPgmFGQNXgvWqKBHGCpKM5QTPceFovKAkbuPrmMXb0ullGF-122APhLPAnK4g~fNcWe2qpqB3Igb6WNKyxUPVUmU6X8NXVfp6mRsAygxxvKH7kL6R5kHsRUf9XD27s8iZN~6WQKbtRlGG0XtRC4neuvBERko2tZ6CvZF7TM5v8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=scratchi.exe

Latest 30 of 34 download URLs

Scan scratchi.exe - Powered by Reason Core Security