home

total_commander_v8.01.exe

Ghisler Software GmbH

This is a self-extracting archive and installer. This file is installed with the program Total Commander (Remove or Repair). The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Ghisler Software GmbH  (signed and verified)

Description:
Total Commander Auto-Installer

Version:
8.0

MD5:
c3a2c181126ca59932bf6d413493584d

SHA-1:
43dd3b32761e03f45aa9440639a9bc6b9d267575

SHA-256:
2f41d77dcc6cb87b2659101f433d2b966996ba57643fcb20c947e753665c067f

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 10:44:57 AM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.131219

File size:
5.6 MB (5,896,408 bytes)

Copyright:
Copyright © Ghisler Software GmbH 1993-2012

Original file name:
sfxhead.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\total_commander_v8.01.exe

Digital Signature
Signed by:
Ghisler Software GmbH

Authority:
VeriSign, Inc.

Valid from:
8/26/2011 2:00:00 AM

Valid to:
8/26/2012 1:59:59 AM

Subject:
CN=Ghisler Software GmbH, OU=Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Ghisler Software GmbH, L=Bolligen, S=Bern, C=CH

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1CD8517B2373647496D551377199DEB5

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:HbBrQxLqg1lETKD8LrWQUsEA9ilhyIFrRFeM5AHqfP0bjtPU6QOqjdluTC6bUah+:HexLh9UWBsfI9psiPMC6QOqjdlujCCAR

Entry address:
0x788C

Entry point:
55, 8B, EC, 83, C4, F4, 53, 56, E8, 27, B1, FF, FF, E8, 7A, B8, FF, FF, E8, 79, BF, FF, FF, E8, 1C, CC, FF, FF, E8, 8F, D3, FF, FF, B0, 01, E8, 04, C3, FF, FF, 68, 01, 80, 00, 00, E8, E6, B9, FF, FF, 68, 80, 79, 40, 00, E8, B4, B9, FF, FF, 8B, D8, 85, DB, 74, 11, 68, 90, 79, 40, 00, 53, E8, 8B, B9, FF, FF, 85, C0, 74, 02, FF, D0, 68, 03, 01, 00, 00, 68, C8, A1, 40, 00, A1, 0C, 90, 40, 00, 50, E8, 60, B9, FF, FF, 6A, 0F, E8, 91, BA, FF, FF, 50, E8, E3, B9, FF, FF, A3, EC, A4, 40, 00, B8, CC, A2, 40, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
26.5 KB (27,136 bytes)

The file total_commander_v8.01.exe has been discovered within the following programs.

Total Commander (Remove or Repair)  by Ghisler Software GmbH
Total Commander is an Orthodox File Manager (OFM) for Windows that features include a built-in FTP client, tabbed interface, file compare, archive file navigation, and a versatile multi-rename tool with regular expression support.
www.ghisler.com
8% remove it
 
Powered by Should I Remove It?

The file total_commander_v8.01.exe has been seen being distributed by the following 35 URLs.

http://gsf-cf.softonic.com/43d/d3b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=4688&instance=softonic_pl&type=PROGRAM&Expires=1434399434&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=RZDi0GH4ZpX1EVqZOflWqPQ-XlVprBdYbS6qgXq2I9luGzvasCCqseByI5fYQeKXVlnosKERBnJ-mRC~iZuN8lxlEI5nRsxiHVhV2ozij556tTQdvpS7A-b0rOvF8Y-f8ztpxS3MYyWdWN9DYZaT~2yCUG2XkTiyHl7Gz7uWAcc_&filename=tcm801x32_64.exe

http://gsf-cf.softonic.com/43d/d3b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=4688&instance=softonic_it&type=PROGRAM&Expires=1478314545&Signature=ZBYbVqIZd9nN1yXnrg0~QbuAX1pr56sz1miBpYiK9V-RKs3n0saN60Rw2C9Ic5K6LsbwBxcC-KgV5BHjV6DY7tyhzsXnhYe42wCWBqCBrCM75dpNz2C37PXGhi1QC9zqLFG7jaQlKYHbucrViz0IvgoEQ-qrNtpKT8ZIaSIAEeA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tcm801x32_64.exe

http://gsf-cf.softonic.com/43d/d3b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=4688&instance=softonic_it&type=PROGRAM&Expires=1478148459&Signature=bMvrrsdkiEhKS61G-B6n-0PPdOpCFsqrPqNYdCrBWdrnNrbX-tUPXWemmv~0a6bsWBSJsVUWYOkMn5N2UOK1aCos~PT~g6kpp8FRGPS0aGeiOy9EBzlhcn7i6BACyUSAjRan0QTPoQyA9NeZnSOLw0gnAupb045v9LMC1o58-ls_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tcm801x32_64.exe

http://totalcmd.pl/gets.php?serwer=1

https://www.overclockers.ru/download?826

http://gsf-cf.softonic.com/43d/d3b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=4688&instance=softonic_pl&type=PROGRAM&Expires=1460264124&Signature=EycDcX0zkz4qt7bwZ4JSjgbZel7fLWg96oR2t0XaCTFbbxgO3D0b~Zx1mIQHNDtt3Ly55D1bNrPpqe38RMOWbbC8aZ02X-J4gp9Sz90m7DWlvAPHIGvkBgNEyeGioiQwDBtdv-CdUlQLb3NWg6LbW0kyfSEHJJbu6w5hCdAcWsU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tcm801x32_64.exe

http://gsf-cf.softonic.com/43d/d3b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=4688&instance=softonic_pl&type=PROGRAM&Expires=1450266341&Signature=MWjaupU1NIl2k-BGDn0pKQGzvgR-yreIkTTHtqbBSzEvhy6YF~dRd7TbikJ1XVJeahNvg4WgbDzAezgR6lIuTbyVWg~Dm4ww~BybzVf3abjc9Gye~yBY6QDbGHOYnDZBgHGLDSdPbXcMK~vJCGUXfP4ruD0vy3pZT24Rt-3~wSc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tcm801x32_64.exe

http://www.chip.pl/download/narzedzia-systemowe/menadzery-plikow/.../download_local_file?version=32

http://storage.dobreprogramy.pl/.../tcm801x32_64(dobreprogramy.pl).exe

http://windows-hilfe-forum.de/download.php?app=total-commander-en

http://mirror1.bloodman.one.pl/.../get_remote.php?file=tcmd801x32_64.exe&kat=app&hash=8ec76f0ce8cad504ee82e5eb171e56ba

http://gsf-cf.softonic.com/43d/d3b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=4688&instance=softonic_it&type=PROGRAM&Expires=1438236646&Signature=DOz7rXk0WHa3~UlAJzerj7xM-s9KamvuSQJwthxGO-4Pio8XveNSZpTozcCozVi4OrkpyqXFEby0iDqoIFVTcwwHGscMK0~BJel4NvDpNL7RvrydSf5hBhD-Htlu1akRaOLX2Vf11X6Nn7wU0DYfeyAfEBxiCT~wmjj6pAiE6Ns_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tcm801x32_64.exe

http://totalcmd.pl/gets.php?serwer=2

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../tcm801x32_64.exe

http://dl.cdn.chip.eu/downloads/.../tcmd8.01.exe

http://download1us.softpedia.com/dl/3a054846e68b5dff138708c3ce7abbc1/52650d4e/100006062/software/file_management/.../tcm801x32_64.exe

http://download.pcwelt.de/area_release/files/0F/E2/.../tcm801x32_64.exe

http://download1us.softpedia.com/dl/4fbc1f7c679efde0e9c3ec03824b4561/5273b470/100006062/software/file_management/.../tcm801x32_64.exe

http://ftp-stahuj.centrum.cz/dl/8df8c2ca2bc94e71eb38d51b66e9b250/526cb1c4/stahuj/download/software/secured/w/.../tcm801x32_64.exe

http://download.instalki.pl/programy/Windows/Internet/.../tcm801x32_64_www.INSTALKI.pl.exe

http://ftp-stahuj.centrum.cz/dl/ddc59f28bedb9a50c1c39486aa99afec/52fbd3c8/stahuj/download/software/secured/w/.../tcm801x32_64.exe

http://www.instaluj-download.cz/utility/souborove-manazery/total-commander/.../tcm801x32_64.exe

http://ftp-stahuj.centrum.cz/dl/7fd57ad07dd5ce4671077cb16794f974/52ebe118/stahuj/download/software/secured/w/.../tcm801x32_64.exe

http://download1us.softpedia.com/dl/5c25222055044e72af972517250cbe21/512dbeac/100006062/software/file_management/.../tcm801x32_64.exe

http://www.winsoftware.de/Startedownload31435

http://www.winsoftware.de/.../tcm801x32_64.exe

http://download-euro.oldapps.com/temp/.../tcm801x32_64.exe

http://www.thefirstpick.com/.../tcm801x32_64.exe

https://office.ingcreations.com/.../tcm801x32_64.exe

http://ftp-stahuj.centrum.cz/dl/25852247f459e0ce788ba5555a7a223b/528db807/stahuj/download/software/secured/w/.../tcm801x32_64.exe

Latest 30 of 35 download URLs

Scan total_commander_v8.01.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.