setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
a75bbfe51f2495bce794bb5a943b4838

SHA-1:
9a24bcbcf58d8ab25d9e915399c9be51ac1837c3

SHA-256:
a162696a92cbd87626741a0a680844f6b7c134601705884d1957a29f76b3b4e4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:41:29 AM UTC  (today)

File size:
688.5 KB (705,053 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
4/29/2012 2:27:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
12288:O6MLlJTupzHTMbGziJP0sSewa9UJM0qLlQATMxA9hP2zbR1uqHFJoSO/L:O747gyziJ8xewa6dClQNxAH2xAL

Entry address:
0x238510

Entry point:
60, BE, 15, D0, 59, 00, 8D, BE, EB, 3F, E6, FF, C7, 87, A0, 42, 1A, 00, 4B, 69, 4A, 4A, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, D3, 65, 23, 00, 57, 83, C3, 04, 53, 68, F0, B4, 09, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9...
 
[+]

Entropy:
7.9611  (probably packed)

Code size:
628 KB (643,072 bytes)

The file setup.exe has been discovered within the following program.

]project-open[  by Spazio IT
www.project-open.com
About 4% of users remove it
 
Powered by Should I Remove It?

The file setup.exe has been seen being distributed by the following 35 URLs.

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1477272486&Signature=aviFDjTteklRsBPSQFGvpmjifCnEBC8iZkV2Bo-yTHwmAwubP-K57CK92QY88pCC8XVItkJbbkEmjmGQEplaW0EhXJKavXeeMYL5VlMpGaeiGEziANF4QGw8vKWj2juEPzAbzEFedl8NmnG-cEvCy99DXd7D3uX-nqiDEUnWGFo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1479016777&Signature=CkzIm7V8UDpZmmm-QmGCrVQ5LyoBE0780CNRv2SBYHdjN42pq7J4zcy~m6D3k672uWmUqhFdbOsPwycNL16lvsSt2JmF9cumXitjPZjkDAgtyKiXNfkfqjHYs2q6Ea37vipQmhmU7HdG9zYZPJIsnXNxkqaa305knLgkpk6d62I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1470968070&Signature=aYqOaS-HyIbdteBlA1TdMHkNp8vLAyQUGpbd5Nk0HD2~N714DsxpqMMLZiGXsJkWhnyoVQcT8UzjC64peRQUpA3ZiRbVFmiMFrer0MAn~TRjpV-V6CKMLM7jGKNQ~dBWSYg4flKwxqBpLbH4dahamR8zRgCmElSuJbHalqdwttw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_br&type=PROGRAM&Expires=1480676024&Signature=eGQLzReZSKIhovWs2dN1X1nXJ1kknAL5LdaGUJBb3FS~I8Zvk8hOf0u6d7buctQEmxSvTmlCuWJiYBN5qd~D082fKybMVtRnD6tQxaB-jnZhizDbSCpQKL358zknpTJR03sqQ3h8~8p4diVj5lmwRvCYOV1n-1Z~eMoGHdW7xkw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1475040905&Signature=IeaV6wI~VxBQLGecBofrLAB0Zbf4VoNrh2bpZpxPHq08IlOtKbXytpRxEGn2UstcVk-aKHQfevdxvdVYXq4MiV0iU6cuwKwdj14KEVzMT9ajDCbd~kUPeLiFMww~QHGlGAKr~mUADY6p8HxW0qyWOjEikWw-SWcxztRJ5LS4nKg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1476566190&Signature=N3V9JJD9fnL5w96gVlehoPjKv5Iz0gjhGtug~2y5zYw-EfbbxRP3wKpGUCj9RxxjxB6I2TFIoFAItl5qzUuuuJ0MZEKsJygZBSsd4QPqQ2jsoUsGAfLf~0o49FTCIk3yspa87hizpxliR2cFkttQE-yveIcQ05G9if-YcBk494M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1477565130&Signature=OEoPi6NVslLKQT2wNLETlfBcO1Ne8B6G~AbJCr7P1-~C16cTSw7PnhWlgti939BkO4OJJe0Ve-aoPEgyXFxgcAfDZo6CffvARSGwMUA4H4RC-USVWYC5u9JEkvqW3VTOFa7qbDdCWHfyXy9NIyXknt8JdEzjBxjxRdd00DNfXNM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://ftp.psu.ac.th/pub/.../setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1479083631&Signature=XHa-0NMjS-aPWbsoxyJ5c1zHJ1BKomJA0Hx8jNfH80gys4sfB7Ak01yzPg9tbpmi3FI2jQhHc8r1USnVhfBVKby8x09TNN5AoXGC8sH19lO3711Vf6IHqYdyl3-1Jbaqy8yKqhVvB1~I6SdSKHV~3ExaTFDnulSw0cUv6RrZa9E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_es&type=PROGRAM&Expires=1479634872&Signature=R~2cOJcaQnbyEescg4XjUOL4fvuM2ab3gpC8jntq9O804leoVBL34xDLJRL-FwrtlWREz6HyNr1jRxNShAPv-tZeVPNiZl6Avs~I13Gg5ev8XcEQ14bdi-873qimNbsiIMFob2zaxZ8TnvtzLXUeIjjQirnFiKMzKBshvciWKpI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1475785004&Signature=LWGec82UHoXC5o1NWqGK~tOrHf4rGHYnLj3W8bOweSxHJob7nMWitzmIeWzDtEmcDmu3sgp0nJF23IlpJVXqt6XpfKhpOipyaAEq0OapNDBC13X46scuwMSH43hwM1QQ2G1DemMGwqT3umbSAXNB~jvng88RcJNVI7QAljVKkoQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

http://download850.mediafire.com/x3n5a2x543xg/.../setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1473868763&Signature=NEeGinmns6Qs1sf7b1Hk3mvhnP3EQ0H5nWNBuzi5wRtC3ZJ~cY-~5oRv0-TTIibvItsjxZIpwcM4n4tKRXEhxNO6jVekvQD6HHkVRVPs5fne3I~e~79V0jdNpPs7LzXZCuVZmLzpZf3BBWZLef5qzyPsJHgoZC8bV~ZxAKtHdY4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

https://github.com/circuitdiagram/circuitdiagram/releases/download/.../Setup.exe

http://gsf-cf.softonic.com/9a2/4bc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11694&instance=softonic_en&type=PROGRAM&Expires=1475110320&Signature=ZrZHmZX-tpiBAgn4v1119dJDfLN6VpQF64TW-Agz9-WEDe~qV6aTdJbBXZuJ9g3n7FqnovQzeED0TA~ZTKn3Opz9gEgxA9ZvJYxJ7HBAiS8YwOT8QmAxcySDPNqrqkN1sJgbMX9j2wzG3tuOqzMko19CKfjFsV2sKeMaM7m-jAE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup.exe

Latest 30 of 35 download URLs

Scan setup.exe - Powered by Reason Core Security