home

ScratchInstaller1.4.exe

The program is a setup application that uses the Nullsoft Scriptable Install System installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
MD5:
fb2f10098a839a37c5c14fb4015110cc

SHA-1:
fc48f579616cab2c2986c018745852e6c8817460

SHA-256:
158e92be788eea3149f808b172d265e08f6c9da5da81634915cb09354cd04d08

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/5/2024 6:54:52 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.131208

File size:
33 MB (34,637,975 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\scratchinstaller1.4.exe

File PE Metadata
Compilation timestamp:
5/3/2008 10:08:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:HibupClnMcDhGLm6cjrKFlUbtg5uK9p2wzJhwOXngg:HaCCTFGLtcfn1KnZ

Entry address:
0x30E3

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 58, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, E1, 2A, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 90, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 4C, 91, 40, 00, 68, 60, E3, 42, 00, E8, 98, 27, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 86, 27, 00, 00...
 
[+]

Entropy:
7.9993  (probably packed)

Code size:
23 KB (23,552 bytes)

The file ScratchInstaller1.4.exe has been discovered within the following program.

Scratch  by MIT Media Lab Lifelong Kindergarten Group
Publisher's description - “Scratch is a programming language that makes it easy to create your own interactive stories, animations, games, music, and art -- and share your creations on the web.”
scratch.mit.edu
3% remove it
 
Powered by Should I Remove It?

The file ScratchInstaller1.4.exe has been seen being distributed by the following 50 URLs.

https://dw.uptodown.com/dwn/h2vbzSoOHFnm979L1SLQ5WfL5Ip7uD8GnSw2-GSLJ2aLmswSbsJ4znbGApF-GnABaNS5l0MT36fIqyQPVaQbwYZgpz5u0VQ6F9QE9Ntpj7w8HtDLrE_fRM-HrPMyMCjP/5biwn8KO7iZ1mz_dctkkhTnvZux3ruscs0nOD9wIn8UczYqV79iH1p2oFqHPidSoloo3X2AJVdOs100O8RqtOb3Mec06cRZ7H6TMxOi0uo4K5tzb53P6jbHjghqfwTps/biCdTP6ZAnOd9T1YWhsxFcvgJQEhoJs-kztErRIBiQR6b_6UQz6laAvczb9KOp-CBgVn2IYQF5nBu9ROkKVyC1EkrNHCmYK-JisduMFP4KJTpTZYBCyz9rcIU7-XFi6o/.../

https://dw.uptodown.com/dwn/NpNwjZVWoZfe72zqvCv8kbARc_EafaGp4VU6G570_eHt5-aZdl-I84SjHscd7Ws5T4jbNFgBwAtyIK79BnJkaKstTBmZgkOWXgimnPmhU0dr-40ovEK5cNGr-NDIeD3s/zrjp6EghlwrsL6si8ct5W-JdJr4Z9RbEgvMYJjMpAooVjz_hdEmDpRD_C9ZQIaA4iNrweBjaTm2wku9tO2_kSyqJZ0uCPnEvm-K0xpxhggiGkx8D-TyQbCcyAgRpk6h0/05nKK5yL1Y97Kg4um3N50s35cV1g-cZL5t0fNqTPGzO2kcY5TOmayYm2rUsroP5bwnxhpNm2bBahJP0C8vPhpN0S4twr2L3xdrCOAS6GvMpzzY1mZ5qtmH4oXlgBljIy/.../

http://dw.uptodown.com/dwn/thtiYqlDxXDHQadGArWM3lJAeKZ3lZQ0EtLFbhTme0POYfNz6eRWshhlqtDzm_lgiXTnAY5xY1vxUJ2lDvT8u2mwH5fDw5RvOkBECADq2b6ltgc62kb2K-_nDNxRr6Pk/H4wQVsrTKnp-shHXWrpz7R8UQAeRr2-ximZCwBN9TGLxYbmeDK8SKL-HHmUvYyccX4NP4xUUdpTgQq3RyJg0vRbaPE5UJAlNZTD0huzswMzkBwNNEx8MoMmr2YlM3d6P/gjdchRVtTahMhmJXbVwagMQHDCApGGUsGs3OhU39mlNNnt_bTbrT-UYmS1aTgcrDEl-bJYBMT74K5eRcA88w-gy_xD6HehIiPbHCDbih_depgZDO1zX9BLAxtSt-GkfE/.../

https://dw.uptodown.com/dwn/ee9V31HEIKW8hJZjfid3aG7yQ6APdiUHwIRR7jFVVbe96KYlZCW1n-7LtBpPChXiQkgs37Fiv3AuODcDQxrH41LTvrYmXAy3I5RPXp60IAJTNWb-tEyeRuG4LsDYD1JS/UaR3uWeIDtspWtJd4ts5h6UBB4C1E8UtnVROFj0jlpWii3225b12yqkLPeEeXDKkOmoUdEwITyA8ksASJLUWkVIq3RUne8ljhR8df7_5nM3j_-bO6kV71gPZ-3GHXKVQ/AdHKp1BpInV63kmvcSETTuE-g5bflNmYkPX6fYzp7Axu_tbt2lkVdimUAiVBSYEbA96r4_cwpV5DVpHV-P8kLmS28lw0Dp3Tf_D51sFS8TDsQeQc4FmXYzLd2SrDqrcm/.../

http://gsf-cf.softonic.com/fc4/8f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62418&instance=softonic_en&type=PROGRAM&Expires=1442629693&Signature=R5pNHvkVtsYQNsa7QveciKiFlOFwlKFk2yDPdbfBVZeXwzPML26aOn91dKR~qERRqDT6UOlj12DcHtU0lLOHcl9BsORkvjS5r~scwse0AWUhy6oOpjCfAEglWYIl8imq3Xv7Fp1V8vN2~fibyRgPP4YVtGa5vxHQj94LXDscI6Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ScratchInstaller1.4.exe

http://dw.uptodown.com/dwn/zxWx9wH4aqYrO0NLpG908tqnqmUlKUFxHc05u6QIFJ63C6-gMevyLdj4DFhIto_egcC4GGmynbYrD1Dz3lZzFMsEhWR0ja2QQtUgS4r-PMM4sh_Ju3-lgQtZwF89-eV7/9svymjQl8WpXtk2ngSGW2TZXqC92ZFGphORvwZG77u0rlCefgAUXtwkHe8PEGE-l6u91NpFKci6TyfE_FLQzsFbVNGU45AhHp7YdVWCbRwNKCKhVt8iraiWOw6-D2iab/166vpuHbFwGS9YSnO9BxaosAOXglaWuuzHpI0MWADFMSqBym7N5_bExQulEH_eJ7IZs5d6iUaU4xZm-N5gbFChbLlSZdu_eGgZnmijo3XGE9iUbVOwJV76MqrzN2HF0a/.../

http://d-cdn.gamejolt.net/data/games/0/91/53841/protected-files-cdn/.../ScratchInstaller1.4.exe

http://ultradownloads.com.br/.../2,939266.html

http://120.116.40.3/data/.../??????/.../ScratchInstaller1.4.exe

http://dw.uptodown.com/dwn/S1hoVJIILqVHq-HYL-fXrpURz_yVLhHHsRHoyvhZKuO-CdYzxhy5pyywNHNjuTgVMQ9M8P5PvesWWAdMZiN1gbghXlnl8BeCmRi-b-rEreuKb8MnVrbWvAwvvGMHLnOD/dMKPEGbZtKjNBlcIrNQABgT-YfWx4B5SKhpNVE1hF34UOOWLm1hPknlR-t9yLRxjDxMbBmgzraCHX0H36-hP2_zS_pHMwjFfKJD06b-MJAvhR3KMIF4p3LAjS06COdTQ/.../

http://dw.uptodown.com/dwn/0A_SzMC5j22PV2lgyuD-GuTMyHlAWMV8EiK6HHdcqnCZTJTqeVUOC5a2iefwKdwq2US50aUheaNwId_Ftl5TdW_BCwKs5yVUx0JHQj3-o7RL6_vbtxUNvxO5pQNIlpue/JCTnA9Ey_dEa6TGk36MP5h8xWKA-iea-R0H4juZp6MmKKNR6pNPvVorCAV9fuzGIp8npn1xY59I8tqG1zBE02eAc-vVO6Nn-sL4cXumt5bUBALlLFrBhOTEHJyMNVg3U/.../

http://dw.uptodown.com/dwn/x3arUIDFogVS1A7H_A4uVUjUyk0iwzfDqJpzBh7sFW_-_bFlijJEUfUUwbPSxC8nMVBop3qR1vnAkgqGqEIx6ct6v-iTFtl7dLlUnpw-dzwJ-UQqmCNH65zHmfJI5VKf/bupqZx8cZOvHo19Y8m8cugeqgk89iW3jd5Y8XIf-Zdpwj7KsRHv72l-b6y5dBXjP_826yH6zIdwJz-NHzelhNlC5fbjzjaN9qMeMf3CVf_IvtdUVc29ajZ0uFSDKPlY-/1ioAZ7Buk7KiMwjVpE_XKz6EkE4wk575FRR1n0h-GMrxjVLnvULdWyVU6nQEwCFjICMcsjQL06_yFzKAS6_MUOyiIg3HYUSy_3cKtx-9uINPio6N2OP3HSkkMefK3ARn/.../

https://dw.uptodown.com/dwn/fBtP5eAxyiHfZUNAOf_gYScSeAg3DLFHlPgbVx5EdFefSJkV_98a8w7fYr0Gc6YQUfAfWEd1CFPiE9OMM0CryGjWuGt6ZjaOWc1gwKEV0OnIf4dQUejs2P8G__172eJh/PoTpYkCSFkFKUPaIE0xcmum17_42lsDHPOAmDBbcdnRYTdMXn4US0RuAaM_Nlrgfv5CbnRC7VRHj-7hub13mgQsN0nGvoGBfxr53B1iZaiFakVXpwS_k_xEW691ZLMB1/QnfouGXv3Zyqns1mEPvf83WzNDCdTJOcvnYjxQjHesnM11j2jdLcohx62TN8j6LeLdLzmhRd7_VpIp74d7QsTW-6Cny2If1DcUotKyfepHAp4ltftNthb15p9BHoXBD5/.../

http://dw.uptodown.com/dwn/xxSoccEHPBtwMa-gxcsOYhQ5N9mcga7fBi0tcIEHDYGqBpQtWYFWAeF6F7UmQ37RIpE79NHWX_X-B6QXnvZlZ60tJTMCK_O6xyskjVkC0B3PQAvNlLIMDt5HWXJxj12b/NJioeMXSVdg4Wya6W_T0Mmp3IuUmdk3ztuvcTdJJPztEzCmNJ2gUatz15xCqjO6vNSJLltgANsIT_c7Cytx0ZzvY8ycMQoVMR9rieJD1uCoSQO0KrhG7qyAsXndxhptU/EAi6GUBE9bcyKv5Wh8_yFmL7LxZu7agKAku8BqQwKoPmG65Iw0ZQw6z79Da8xGD2cHFsORWlWiikP9Lz6O7FW1Fr0d8VT3H9LYCvbIbdovfLafKPYasI4QBPfylT59n2/.../

http://dw.uptodown.com/dwn/qdahXJOzdXBlK7nQnVGAdiEhqKKgY62VgGPyDFvmp8OzFGFEhjkmmEmRzIRx7XAiY_MHC9PknkQVWHcA5g-IiT_H3RlteqCky2J464HZ_duPaA_p-YOJesYsKVG_uqS7/oRBepbq_VXw69SYgRqNHuco306F7P3V9Mpa6uvA01rhA3AQqPwNx5kjJIeE6EQoiIImgEIT_p_TaZrslNiK1oVmEdHGGiskhxAKckI4rURoKnXYBUUgqERIYgdh7-fBu/pBnU7kW21qB5tZXRWKfdifl8sHoDRi7L0-zkbXnpaJLi75U2McAITPydDoFedJbs_JIzzNniDxkRBo49tB8KKwsuCQCNvW-4XuiKYJ-eJPapElxmOIR3NOE6p2KXdcSz/.../

https://dw.uptodown.com/dwn/8nHE1CfjdashG_D03lNuBm_kPqrRyUl8Z4mizmtIBseNbfmOtVfaczaZxQX3IV2cTBdgeSZc-vfTqUDhJW80sTEXnS8ZMGCF9T22kmSfsEkyihVONRFkzlWyIw3NV-Vt/SY6OX35vQBrBCFCbNJdWiIAhRM9QOecPKnvZvJJcH9_Lr6NwDzntmc97n53H-jIAE1r-vd6Wh9MSSc9elAacxiirNRBJX1sZNrpyjoHezcYOsg8h6f-xaicq2lNSGCqj/dGPZmIBi8PYxcOKERux1Kw9cXkYZc4CAg_v45qMFLbThmeESa_xBcp6XagEFB_lfzgKn6c1GrjpYT8c0zXbHz4Nj_5Ri9gJfCl3As8KmVmoewZoXBnxFixNQEpWjQgtn/.../

https://dw.uptodown.com/dwn/0iinF9Q-lNebaum_SivGY2wxxGVB44gbkc0iY_9KrpN_cy079bYlU_aGUCRSlKLvVJe_cnLIZ9Bw2DlU2HTXJknyqG8-7xMwBezNwN3aj7CfAIj7HZGO5PJIL--8GFCw/32yP0_UGNgEssAotLf1a13LLsrMASDd1UJNSRM1oQGzv_9zIOtQzBO7LOXo6dt7O7zHdlGMM7d8pTIk869fGP-0GJuGYBiAAXrkQABWImi0bbWKlja556EBrFYnN-jUy/RIkpKApffmTNqEZjz9C21C4omG-o18hpgI56YaJrFXl_W5jC_gw3i5Wcb8lq2WKU5bHZFUz-c5dLLxG7yx_MbSBF5cjxp8kl4iU0ZAa54PcCJlml7dDhCQgJd1tpVTRQ/.../

https://dw.uptodown.com/dwn/jk45kXRrJNnH63TF8ewYilUiQ-3TXrFa_KGCITi-AhIbh48ZHuiXZOiCNLc7gdxyZICSJ9gZt9NXi1MBcK-izStiUdmGGPDAuDOyr3TzAHPyAVLO7xhFU2XEycgAESUZ/SgqQuS2ljCUxsYmdtgBRVObUzE8pH0z2JNYXxTy63EbqNfwy4807RGw8HalNV9KWgwJMCpKOeCViuCEesVtrkrddVFRfAxINQID0LQeVMyUU3K4fyii9-u6esEoUn5_p/n5yNyLG6MtporJIR4KCQmG0-48Zqp1198HxYOY_cC9GV6XFzBhOv4wwKk-je-n3DcYevRWDjEtPMhfVVfGalZ8V-KQmA8D2ahxgi86RY6C2RZG8OHVq_D386t-VG64ez/.../

http://dw.uptodown.com/dwn/9nC3MsG2SPsf1DwZw3JvoJVwA2lRaCULIDrvfBhjcB_hFCxtjUPMxYnfBntOBu8b3zKzcYIhs5YbVYnaPoE0qKrNqf0foj6R4ST5CXCu8wr0lirTqAGf3CyjouUVOgPz/IkUrp5sXDhHuvi_wdaPYlsejcWVViKwH25CTldx4xEs6WU5sDM9wSm8uRHq4MOpuOkVoBCalQz9100zsiqN8OmjsuMlOlU2HneaEWjdpVXG8whDFCr9XOsXjYJjQKLwa/rWwH6WsxKMJ0PNzu8oJbjKS-GfGIU8Xrrb7FruBn4zHg0tffBmLCIZKeCz8w-xFAkTFYyKfnQs_DGEnvDrDuFK7B_C8WKKvxtv_u4EP0Cvhf1NigpwWMb3AKanqk02PD/.../

https://dw.uptodown.com/dwn/ngFKc6TibHCI6jtSnDmJQ6cn6Zlvi4Qsf0yaEJ6q-sMRUxRBLqqxkpPU8UmsHBCa_rqwJ_fEmGm2-EavgvCTRX_Hi0p-L6tea8Z3BFzKoAxXKJvA863nDhLW-ZMyaENh/sSvLVnwWrCZcV75YybisCzpTw1HXSWDzOt2oPyG9-4M6uoUZqDiOGACY5JqEZMt3kY90uAZtYzxAnIvEFGRD58IpvBE-69Jyt6yMdWSofAbpXqXewAlujAnAjfML8lH4/enZtdWrYKD3soyx5omk_1hFKjTz2t34Bealh15pOCoHLeFL9WPBCW82eqmNrZQ138Az8nRZTBOwKsOBUAtze9txt_TGOD2yaviS8TDlFaQReK6exB-VnaVmrB87zN25s/.../

http://dl.freesoftru.net/down/b1f7466735686f1de34d60ee27170e6f/.../ScratchInstaller1.4.exe

https://dw.uptodown.com/dwn/PhPgESbQZOvOxJwMix4b-jQpWshg5mB4S6BFBgkSiyrHPMq7R20zflSP1BkLLN26TbbMd23TElkV2mCRK8QZzLm_I_C7f9kdyu8jYBWnT1UvGRiGyIqScw7-hY0l00rd/jR_7jfuIpHz3L6uEe56vXwvmlpeUkzOF_5gwmE7GbP1nqsnpbrPZ8N4QkuyE-UeLp0knLYyY7IpAE-gPS8BMzvQEGUOFk-tjSG2EfSkVFnWIn1avfNc9H-APuSgbF_V6/61Pm4wC85hWWOEyMDUMaoXC2vp2VEexjNLCfybBos07jflNRF1GQZoLPzkPttI77mwec46VUgvGgqIqa4CcKREOEVkhVSf-Nx5Eb_HRMeGsdhTtjnLDS7QMZNoAmtcUz/.../

https://dw.uptodown.com/dwn/soH3rQpq9M17hT3NzIlYGwoZPES7Zy52Yo2BK4Zqr7-Zzl2b51wM_jfbXuUcLtei1TnzTsQGR-9kT3vPmz3LRLq4M_hT2Oz9E8ISTzbS4rdMgsz3pj03wF-fNwyQHchl/e0HMUzTPnxL-zZYw0AbgoAi3Wv4cWdO1MHdVkKTcTZTTHZZ9CuUGzHL4-XmneDgLE0ONgPUomNJBzGxNXRM8lSjuAcRgQV008Hn0kYKSktI1sXVi8QSA8tGSA3BhDAT1/QaXR4BievkX_QUoWlS6SaPAtMFR3oJAVoZoVMbln-NCyDPRNH0vJyAFehCFLodLrqr0vRFi2ushYN0YddPXozNy80ZxBSaqCoZ-3u91PL_cU_uY70VKvuF-oHofJUQwV/.../

http://dw.uptodown.com/dwn/CM0Et6lwWN-CqE57mOdAhFedTk-OWUKnjP6suaBCzw7SUREPmzK6_MpGbHv7BHIv8nSREurjXJsrkUrCHYEfTs12yG0r8fxUm3fvvonMfKx_ZBK57Q15J8z1XE2v8alZ/kV_jXF1-YOtXlT6Sh_Ty-onwdrSJmzz0PUuOjvMzYM2GcFKyzXuBNvBDgjvqivR2exl6xWF9ZF77wTJCC3Q_gw5TYKspySsFxM8GXi81nkt4TbDoNBI_nxmIeSZfm-rU/GaNZ1EIrWj8mjtp6LzNfBDLiVKloWGJlfkW-tjBaAlgSbZzrjbYRIn51F2xmvlnketl4dkOYfDgEemAk_IxyZKgNWe9cvu6mT3hYKtffeizCXRypJnSfC_HFttFXhMcq/.../

https://dw.uptodown.com/dwn/-6XkJZ5h3niJngTLGBEtvbSJgFvKX8rZ0ertR3LxDdNcd4x0yRU7g1izwRvAVatTGzmiHfxpUs59Wph2xIsZFlyF_ZxowTjHgoAB0rjmyMGCiK9p7-Upk53esgEOxCWo/dhypjOBMwbqw6lOVSdUgInBEZ-dX4mhiMTH23EGw63l-H3nUv7buOv1snOG1M4Ul4cSt7L55b_gK-IzWyQknvQX60ogK_vaBjTzkG0jlJiulOQ0uHSs2C5cjO9CiJIUF/US-Nu4C8Gv11-u-86WqZH8zLbIuvsPS3C6p4fALBrA4PA2TEQyTT0O6pEO1OSD8WlPTwoeWWQUm54bHMLKPT4TO1uehwtMIeCddSLOScyPNP4g0gqSLmD9B0q6oLFwso/.../

https://dw.uptodown.com/dwn/L60zHhS6lSpWsnCY7Cg1wbW00h9KYFUJ3algOce0yrYDrJ4b92J9H5tppXMl-SwhEsixbGxaEl7YAqEdk65MQFSvmsJbCsoxo0uP3YuqtnXzf8UUym-v6IQPz18laH47/Ph-S8sbBHRI97f3UyEQ-9gK20lVmJuGTiXA9UxTksE_3m48kWJUGsN7AqWoEouZWQi1Dw9o2qngrtAQOCDKKHHhryoIUwnNc9JY3QIk-DvgP4vIPEV8c99FbaQw0yh0R/TpAqjLpgIzm5ON9udgkpnHPltkVQA-g_nbIbkXMb_1Ym3r8ou2rVeor6INT3OZcbkQTZXSyt_qkMChb9Q-YTUD6aDiaU1P9RYt0y3KHt3I7cVpT6IkK8vs-D2H9pMcEI/.../

http://dw.uptodown.com/dwn/mwajpu-4j19VMe97mwhyiOhNOmMjybijYlG_Vpy0Tlc7Vsadna5YeTl2cGtwLHe18JABAHRCn7hTHIpkgkPi7DbrSqe_LQDHtjfRUpxRbM4yS7JmAu4vV1IJgagpa8Th/bMMpaqxNnF1NBSbH9Vcn1gQz85tw30LcXnXNQcDwgOZ_FT7OgK4ad5A_uKcQAOPC0n5uyv1hUbdQws9sifgY_c7yo25B-xhQYFcMu2m7shg71LW7ZrGCvacATe7HhU_P/Am9m4bQTaEHLqSJ0qcXDzb9bsDx8BPI31uEovEoOtBE4afJl5GNDe8RP3Mo7v4rlWLXdWLQ0vAAnbi_9XDPdJYdBFZkkSpms1lQvjwc-WEaeUdVNIKESOpJu5_c42bKR/.../

https://cf.managebac.com/uploads/asset/file/.../Windows_Scratch.exe

https://docs.google.com/uc?export=download&confirm=pw5q&id=0B5RduyV_a_kNaVhTZkVRU05FcnM

http://lms.santillanacompartir.com/student/es_AR/schoolclass/activity/resourcedetails.activitydetails.activitydetailslinkcomponent:downloadresource/.../9435891/SchoolClassResourceCollection/11199293?t:ac=14631420/.../9435891

Latest 30 of 1,186 download URLs

Scan ScratchInstaller1.4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.