home

setup.exe

Thomson Reuters (Scientific) Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Thomson Reuters  (signed by Thomson Reuters (Scientific) Inc.)

Description:
EndNote X6

Version:
16.0.0.6348

MD5:
23fe7363d9c104a5b9389c08257fec26

SHA-1:
c4ec268ca08886fba55c4c393f91d94918a94465

SHA-256:
41f4a65e3b4019d6cd6edf3a9071f824d6553884bb4b9095964146cf27cd12a6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:14:34 PM UTC  (today)

File size:
71.9 MB (75,402,416 bytes)

Copyright:
Thomson Reuters

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\setup.exe

Digital Signature
Signed by:
Thomson Reuters (Scientific) Inc.

Authority:
GlobalSign nv-sa

Valid from:
3/7/2012 10:37:22 PM

Valid to:
4/7/2013 11:37:22 PM

Subject:
CN=Thomson Reuters (Scientific) Inc., O=Thomson Reuters (Scientific) Inc., L=Philadelphia, S=PA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EF1A3EDF6D8F2A60BE618FB3ABDA0F17

File PE Metadata
Compilation timestamp:
4/8/2005 7:16:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1572864:WsM9kl2fWQ3e2jUX1iG/Vl5OXmcr8rPhpBoVYBLj0wJgM3oF7T4A:WsAkEpczlsXmZrPhpl0UgM4r

Entry address:
0x4095

Entry point:
55, 8D, 6C, 24, 88, 81, EC, EC, 0F, 00, 00, 53, 56, 57, 6A, 04, FF, 15, F4, 70, 40, 00, 33, FF, 89, 7D, 2C, 89, 7D, 20, 89, 7D, 04, 89, 7D, 28, 89, 7D, 24, 89, 7D, 1C, 89, 7D, 10, 89, 7D, 4C, 89, 7D, 08, 89, 7D, 14, 89, 7D, 18, FF, 15, B8, 70, 40, 00, 8B, F0, 8A, 06, 3C, 22, 89, 75, 58, 75, 24, EB, 04, 3C, 22, 74, 0E, 46, 8A, 06, 84, C0, 89, 75, 58, 75, F2, 3C, 22, 75, 14, 46, 89, 75, 58, EB, 0E, 3C, 20, 74, 0F, 46, 8A, 06, 89, 75, 58, 84, C0, 75, F2, 80, 3E, 20, 75, 09, 46, 80, 3E, 20, 74, FA, 89, 75, 58...
 
[+]

Entropy:
7.9906  (probably packed)

Code size:
23 KB (23,552 bytes)

The file setup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1482622522&Signature=CA642CxXPuco3WmqtffMcEW0wPIoleW1bAExoeRLhgt4jky-1bs01rwHuIamNcIjzZv7VAUWaZRlbvKO6a-WFeu2MeY946rwhNeQnjEwuR~5LSBGc-DttFSGRc~Rrh3ZysBBeA2t8eLx12IyWNU35yo2yjX8Ni2jdrAqqGKzKIc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1483333323&Signature=hnko089~jDnU3CZnz~ZHH9YcNvPPH65BF8xSy6jY7QoJWKlwQ42Sj3lkUtciel~VP9E-dw-bWJ0UGCTJ4wQritIe4DmUX40mn~d62w4tS4itjDn8Xw8oHfSEddwDRyKeQ1ooG-gWWx7Y02RI9fkuTmmQCXOSSMrsJg8vTfZt8Ho_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1464001736&Signature=a15CaxuF68hgYxefM8pchtQ57ymwSzIZ-HVb-KVN1IuQr6KLzg~S0Ld~JAPU0XQXml8q-YkigreIbT12XdjVC2R66Mi8WKi1G3aDTva9leL8aY3TPLhk5yWW47D5tQWbUbPsLuXO7AQODLiQftoeAHA7GZD2g9P80LJDUUPeooI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1485316297&Signature=hYELDwW26kzyJjoquoJ2E-0vTCKEJh9behbOM~Ip5FfhZ~YtGJiZfZYF-SRkudiBSZkaUItr3vBxyDQKSXN4TWIj8WClQylkACqEATOadTS8w6PImgoxUwpBooJHCKsiMWXpmTe-uaRzB9fTeqolY-MdP89qqAltEsZLkLt7ll4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1485441891&Signature=L4zQagG~KhgzaafF3QRD9TSoO7y4YVzUecsIStq5MNCbXo5x57ekAACIh4Rf1QGI-5xVhlflSagxtXoZnpxoRd-Ou9atGcn4ziJVsLcuTCWtA4X6bXkOqPXbbuBmpQfKikzAbhxYJTAgxO655fYtkKqU0KqBvQEj-LqpPtx~nj0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_br&type=PROGRAM&Expires=1451905476&Signature=EbXxoxsLSHYOktOGS4lRfu4K~93UvT2HnHYrgetIjeZ82ujCHnYoRpI3wdsUWzydVSpy8hmupFrFFP74Xo6LJw4g4zZhOJxuOPLCd2tjQV9XqeiQcpeugDIbUfVrR8M3yw8X8r42KdMrrz6MRBDNXqnvy31fvxK9neUujAY77fU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1479053431&Signature=hM6H2KimZxPiuX-KINo1VmWYgoVKt1lDFE0uMdEYP1M~7XCBB3S~Tauw8EhsBKhUsxylwcqx~oUtcopTUbrCk2RG2iJObVTd50QUneH1m1bIcFVBLqKlZAuU-jHW0PgtuGai3iPgBjkg62mg1rR4xKAl3m-G0q9EQe0P-~w0Oko_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1443585052&Signature=LPGUt6i2Khy9l3VGRTvE3h7w8uTYJStIgWuWL9QQ5rstUX48LOCEDDbo3WK3dCXWOe5HIRaomkB-eXYZWv6t4Mu6n7-XS1Vbkgj-Vxu92OitjXO0YzbN9fA6a2Bqv5yJ4WfYEd5T-MNv9AfFaopqUF8uxl28Z4D3vKBswivYIIk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1463788250&Signature=VxQNRFUvyzr7b6sUeLlJUNbsr4oM3XDmMApSYaYNhw0F9nvMS2rXR4WvtS1zOXsMAE5vqCZRfSe3jchvc~XYadkGIIGPhwfUxq3l~mGt~dL3tNnbi5iXCl7z26siwe29ATkeYZplJIWXP4R4tZjWShXaZWP-VjkmdiNdVuhfwTE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_br&type=PROGRAM&Expires=1478297281&Signature=RbuaNbfGin6rUcnLWkPLtuOtoi1zlTL4jhBoGn-kTXEpIUardVdBT18x2l06wk6xvXv302jxPh9bMhRKSVN~fcSKRb9cjTqHbwaMU6iR22B30a4KeFB44lDeks-O33dgOszqdbUk7fvIBS5u3hsfStFXGmd8vlLEfS4C4QF8wxQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_fr&type=PROGRAM&Expires=1481773218&Signature=b1EwQnpvlaz00Upg7FC3GBZyGz8G6b4G8DLwcIFctO3arY59lvNmnVJ0ow-KADWofpoEZ8y29wARH3W1F-0m5UOHCUqM~L8hfSDm2FJRytKO~McI72HYmYm6ff6SLgOyj6lu1VlXvA~vu4cZ48zUgVBIdpQ39hcovMMdTO34nwc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1486288487&Signature=A50ifZTlFrIAG9chDAz0yvj4eZyjBZ7rv2IE4CBf9LBZQO5UN2t4kCKvo~-nNu0IF-lElGtYZ-PFQahQkKYGmZ4-0zbM2SP5Y7mwnQ6Xt5kn9Kd7rUy9C3vokcqzVTNmzjR-xUc-49G0OtvRaT85k9T8Cz-V31MAy~teQkYPXdo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1484753813&Signature=Gxa8JIeeJfT75FFvsjhM33FoVZKg4tKG0AHdpqCBboRVLzeXyO9NPakJFR12i4llLJ1OKrXnqCNeRltOMjbJo20YzoWtIjGdSHk8q7u03muUATkYQZem81vZ5q67UYELxDxXuKT8i3sjhzn1togaqVsTZbWVCxCPuvQrs5sJLNU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_br&type=PROGRAM&Expires=1467155521&Signature=Zwgx-g5p5Jv~kLU4u3rcUZ9ELkWSh24ymoJQxwlKlP1i3-8F5mjE7fZ2DUklXjzPoykPP~Q~R71i5VN2s4nPwh39jFy0noLQFQrG5fXy1befUhvGTSmY~tKuGEctjTRw~JnjynQ1L2wIhylla5AeKv4ccUdOyYqvbd7wTzfQIZQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1485620925&Signature=fD6WSwcZ4lX4H6YtA6oiY7X6pDj9gDn8xjW7tMyRazbk-RbPIG4sCdbnz8D-6dxk6YrMeBbglIV~NjkgeoSYde~VQ7CpScEL0WR~fCQ7lJSWjKM7qVvBom08y8cLjTfV5DAXn81oYXqMoWFshkAp20h4Z6RYnMspUuSht45wkgc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1431495977&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=g6Xl6uQqm3FUBYIIZf2O552T2siZKx78bemglnqmeCUuxbVgUVoao5YxH3eoZGGZmr8niV5jihVSdp4G5wFnxbxxROjetQV1lM5RBLiDFGcHA6igRAVSYddRLdXfdpNA0tw0E0OGLKEqUsk2Myas2Eao~qoyY0wlFyKMNO9FSA8_&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1465285248&Signature=hc352Htlhfvv1dwNqDpdDr-mrGuUEaDI6cbL7hfoI1Z~kZu9PyZ4U0wkUkBl4URIJ6fnn3OVlpfjTBOSSHWR5nRr9aBI1hJjgzn2~x34dq9EHFa3LJ048lqgGNfJetixKwNjeqH6fcR4cVk3bp1wLI7AnqyRbNlSROpkAbTy8HU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1463291076&Signature=Gf-uW4COE6jMU~QnROPL1L9~41oFDTo8eLBA381Eb85s2nms56nbYrjzFqtL~YQ276bFyDlHaHy6w2sdeIWSd8h9tAwkX8cUqfe-QfeXUOZfMKnk7kuVZ~XrzpvK6zGd8RAlaKS6Cqt6Baef2IdG5E1nSI6DNGznXCvkGp6CQ94_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1478223892&Signature=ZODA0r-d4JnG4wdtTO6Kx6UiB-o24YACY4vNEsbgAR6fhy-moRGCNsYk8iiGC5VuVCGgLEVko4b2RXFw-Q4TTQ3y5Xh~eNLwNMxUk4daYLFVQorKDfPsxAJ-PQbKgnnEljif5VtFa4DuxWdGMhc1XjsuTaWExgtTWQ5ev5VzFJs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1440051788&Signature=YBYxRyt72UZMx9dzLSPyRBXDOC8YWNLRdkfZR3YT2yx68EmCV4MrAv~DkFks9QpZEm0bxqr5Oei8sbX3orL3nk3FVd2C8ChOwtTdxXudFtuy5jW5IZQ5ZZfMA-hJ02Qh5t9iC5lMqx5vha72-GKnYxB68fYzN015-0YrsMVhPHA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1476925851&Signature=amPIk-mS08gJk7BnKxdMvHTJqMn0dgOLJnwM2oF0yWl1fTJC7unkm9pHKQSLoB6d~vw-NCEqd7HJ5cVP2BbqX~GFaP5mzSusDaHfj6VCq1IMKbPcQkalKJNpgfkJLVQUOFfzV5lk93-xP4PROVOFTrKykgpRLJZxJMEYubfcp34_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1478661169&Signature=CcR05clPx-Yrv0Jps1NjZp4sLbCdIbiwIp~YsodozD0BpSDTr8qk8LwTLWUCnRnTcmIx904SWH~BcszEhsWSLIvc4t-sgRJe3r6aR3agcOqr3quQadmLCvb4AJRtx7m487DgULwJDcUL1Y2XhrTSSvxR7FDo-AWEIy6Ktvk6mvA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_br&type=PROGRAM&Expires=1422874300&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=F~QxvsSo4Grtw580~RMQJPua0tDCeTtXEfeQxv8SNu6FJ~nHDBRP2immLkTK3TsAhb2aMulLx74C5gGJbE9pKNs3w6~FAqy73v4MVyHpAp3n2tGrUo9FSakQvLE2xPwnYMo5omvVZmDSLVZ~HdkdTXRN3DwOU7JPMBeg9KkoB68_&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1476071270&Signature=huHDCSmfXwHmKnVQcR1f9q2M2a2fcu6YA2INl~jk3tscvkFoWsYaJ1jLWyMFg8-JkwP~2Oj9l6~XB6nNoWUFkDwxbg752bagFIgf15AzlkktZqOha~gBvvqhwzoHs2jOG8QnJ8oagCqaEQTx-wcZxyTtbLFWSXv0UgJ-A-ULNjo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_fr&type=PROGRAM&Expires=1476234673&Signature=FN8WFdiT2t8vq6p0Zudt~4gtrZK8aPBxVesy9dYMd8Fjq9EP0IOcdduhaqDRYLvQpLvH2~X1PEXfqc3rp1wYplXuHpuabL6iuZmjIKi9xWcp1aheDdA7E7WeMOThfaYCLhnQPI4y0AXx2Olg-9nURAS-A0kjeFp8qfCBDrf9C1o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1436680899&Signature=R2fAl5vUDEFR0kGvlCN4ioJgHv-KGswFntbvq8OgTrDYffuMC83GCR6npb8ye3kuP8G8o5ghKxfiDjWA9y~FA2WwDZXumvQBT3Ohc3oR0mMBsIBZAiRDDeL64ZwW0xY~fM5JUnrQlBy-vSHIj1x4ylqMV9WQocFtzWxZEJzOyuw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1424557817&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=gcqf9UF~FJ5BaOjATpv0YYmU-KZonG-J7i9TcMg3mVCWBwrVSsplWvenzhxmOPuwUXX-nVLySzEl34icfMq0wwMbNaHCq~pPTlHLxrby67fURO19ZeHk08~hByUIRZCk9zmXpQQtA0Ru9tsUciR3ibcwV6O-D1z4K1SpGiUQb~Q_&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1460460896&Signature=ZotVxKJ4zscuJ4mN~MPXyJSiVHLSVJeU5A~ZkSB2~D7IoLx1Uyr2lrlQsVTZMVlK0crOxFGKOkM6FEWOfvzwEqGnm~xrmpnMS~AbOqHtf4OHZKbNAQ11bN1QbInFCsCaqIOPCSFVhuQzwU9eHfJwGroGGRlGfrWPF5rNu57y61E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_es&type=PROGRAM&Expires=1471944552&Signature=MGz6vh5PhEwG~IitVLMRSDRyIaOtUFU2Uq4SB9QKTXGWtZ1-MFk7okKKbNqdZjNeIjN2IQIJQbKtFpy5Wa9rFLcknJTDJSuca1a-G45yiIR7wIGw64Grf1Xp8VpbQvGpRllO2QACfgsNDt16XkmMDVXny6JFy~Vq4205iFzyLKg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

http://gsf-cf.softonic.com/c4e/c26/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55251&instance=softonic_en&type=PROGRAM&Expires=1441955585&Signature=BVv8ed3sH0pT7u2KffDMILWbgESmvAW0h5NcOkUfqqQ8kecZ4y-Ep027H0yZLg0-TIj39x8hwK9iVJrdCEKZ4-lH297cJAjv2x44pv5y1Bw~fkTRjuWQuYbNHKIyq0t0L1yCAS1xPiiibW6ly85FYZjsn8GcDDFcgcurxsOAw8g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ENX6Inst.exe

Latest 30 of 236 download URLs

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.