sfhelper-setup.exe

SaveFrom.net helper 1.092

Samokhvalov Mikhail Ivanovich

This is a self-extracting archive and installer. The file has been seen being downloaded from sf-helper.net and multiple other hosts.
Publisher:
SaveFrom.net   (signed by Samokhvalov Mikhail Ivanovich)

Product:
SaveFrom.net helper 1.092

Version:
1.092.0.625

MD5:
60bfda251e24115b528d0db0180a53dd

SHA-1:
202bac86eb40990ad9a78bf7e54756447c180b54

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 3:38:16 PM UTC  (today)

File size:
7.2 MB (7,591,960 bytes)

Product version:
1.092.0.625

Copyright:
All Rights reserved © 2013-2016

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temporary internet files\content.ie5\{random}\sfhelper-setup.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
4/25/2016 7:31:12 PM

Valid to:
4/26/2017 7:31:12 PM

Subject:
CN=Samokhvalov Mikhail Ivanovich, O=Samokhvalov Mikhail Ivanovich, L=Saint Petersburg, S=Saint Petersburg, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216F0FB76EA2C96134616CFB08D0F0266A

File PE Metadata
Compilation timestamp:
7/16/2015 5:24:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:p1fe46b2LlKqzbHsrzp+xVX0otiIwHlhGH9IwE:p1D6b2LlKqzbHMzsxVX0otiJWdIl

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file sfhelper-setup.exe has been seen being distributed by the following 50 URLs.

http://sf-helper.net/.../file.php?id=01&f=&country=ru&ts=1466044953&s=f58a447687061afce6831e0647dbeb5c6cddd8bf

http://sf-helper.net/.../file.php?id=01&f=&country=kz&ts=1465899829&s=16763a9780c33489c08a1f4c51b1fea0464d4104

http://sf-helper.net/.../file.php?id=01&f=&country=kz&ts=1464679489&s=d74db47ae3236e1634189b923b250f74207b683d

http://sf-helper.net/.../file.php?id=01&f=&country=ge&ts=1467050881&s=0aeaaa0f1ec093b748f3ca9372e0ff8abf9c9a4d

http://sf-helper.net/.../file.php?id=01&f=&country=kz&ts=1464971627&s=b3a19bf2fcf4ba0ab9ec9d143a11f1c41fb07b43

http://sf-helper.net/.../file.php?id=01&f=&country=tr&ts=1467662608&s=9af374442e6f8268e56f0f5e5df22d67a59ee4e1

http://sf-helper.net/.../file.php?id=01&f=&country=ua&ts=1464971626&s=ea11e29803a3d6d041a58fc733483a84c9792e37

http://sf-helper.net/.../file.php?id=01&f=&country=ru&ts=1467215795&s=cca604c18f384f2d0bf87c6f6e1908f275755637

http://sf-helper.net/.../file.php?id=01&f=&country=ru&ts=1466922015&s=8e26e7c49bcda92488926cc71262ec3efc2d2b86

http://sf-helper.net/.../file.php?id=01&f=&country=by&ts=1464435168&s=6d588aa837bd1f784daa8d5363e797867fc5697b

http://sf-helper.net/.../file.php?id=01&f=&country=ru&ts=1465807136&s=9a0fcc04cf269768cbc836b6e6c806f6c468fc7c

http://sf-helper.net/.../file.php?id=01&f=&country=ru&ts=1464721029&s=9422a8c7aeea4176a02395300b5c6c40fa28e0fe

http://sf-helper.net/.../file.php?id=01&f=&country=am&ts=1467209519&s=a70c778712241af8f4c8ed3a3ebbe2b290e060d0

http://sf-helper.net/.../file.php?id=01&f=&country=md&ts=1467485424&s=d67316ddb8a82e45adcb37f86ecc2ee971d886c3

http://sf-helper.net/.../file.php?id=01&f=&country=az&ts=1466618429&s=f3aead59caccd98a1443c28597815f853634ec4f

http://sf-helper.net/.../file.php?id=01&f=&country=tr&ts=1467206512&s=2f183e5145b7f9d231799da66f588e27e62d8307

http://sf-helper.net/.../file.php?id=01&f=&country=az&ts=1467103781&s=d919b0d97f17f6fa3a0e44acf3156dc71a64ba06

http://sf-helper.net/.../file.php?id=01&f=&country=tr&ts=1465754264&s=b5a4c6805c080766c5067ce6860cc842eff3a769

http://sf-helper.net/.../file.php?id=01&f=&country=az&ts=1465890974&s=684ae65b39eb4f70237fef8c241b6f87ab478a44

http://sf-helper.net/.../file.php?id=01&f=&country=lt&ts=1465926367&s=dee68a9b9ffef9510d2632980292078799d417e8

http://sf-helper.net/.../file.php?id=01&f=&country=by&ts=1467203585&s=4f5a062287d156fdcbc885f0d9bbc88df1b4fbad

http://sf-helper.net/.../file.php?id=01&f=&country=az&ts=1464814821&s=18176ad1e5392b239bc5f55d4665451d937549cc

http://sf-helper.net/.../file.php?id=01&f=&country=md&ts=1467274098&s=6390bd8e719c8aa9d3d307e47f6e4c8ea8fd1f9a

http://sf-helper.net/.../file.php?id=01&f=&country=by&ts=1465576605&s=a33eb7670ab9798bf7eb6d98d89a6b3c68df950c

http://sf-helper.net/.../file.php?id=01&f=&country=ua&ts=1465176680&s=3a9331556de4e5e13ef22cc655e9a3ad1c657e06

http://sf-helper.net/.../file.php?id=01&f=&country=ru&ts=1465572451&s=a266abdc390214030b48e525bee01b0ec1572995

http://sf-helper.net/.../file.php?id=01&f=&country=ua&ts=1466076936&s=d35376e36342ff50166c62d54c6e75d9d90722d8

http://sf-helper.net/.../file.php?id=01&f=&country=ru&ts=1466570757&s=0f7419c9d469e87cac5f17c8512fb03cf7333c10

http://sf-helper.net/.../file.php?id=01&f=&country=az&ts=1467658297&s=fdfa80b483c23872f2f33f7e3c64ebb3de61b220

http://sf-helper.net/.../file.php?id=01&f=&country=ua&ts=1466849603&s=ed7575d24d58be0a0bceb9f231900b194b8a7e5e

Latest 30 of 617 download URLs

Scan sfhelper-setup.exe - Powered by Reason Core Security