tuxmath-1.9.0-win32-installer.exe

The program is a setup application that uses the Nullsoft Install System installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
d98223ce82d77bbfcfb0161208e990f2

SHA-1:
0bc8132218e46ed0fd96330253eae8bbf71efb94

SHA-256:
2f800426d3eeaa100fa78c06e43c379cdfea3c012dcc808a03bdfa733fd20039

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 6:55:40 AM UTC  (today)

File size:
17.2 MB (18,056,200 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

File PE Metadata
Compilation timestamp:
5/7/2010 11:11:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
393216:2ttSv/hX1IbKQ0UJyWzV2XR6vq+LM3o3RWHl8uhS8:2bSBlh4JyWzM5EMYBv8

Entry address:
0x3E3F

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, E8, B0, 5D, 00, 00, C7, 04, 24, 01, 80, 00, 00, E8, 04, 57, 00, 00, 53, C7, 04, 24, 00, 00, 00, 00, E8, E7, 5D, 00, 00, A3, 04, 08, 43, 00, 51, C7, 04, 24, 08, 00, 00, 00, E8, 27, 32, 00, 00, A3, B4, 08, 43, 00, 8D, 85, 84, FE, FF, FF, 52, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, 4C, B2, 40, 00, E8, 81, 5C, 00, 00, 83, EC, 14, C7, 44, 24, 04, 4D, B2, 40, 00, C7, 04, 24, E4, 08...
 
[+]

Code size:
35.5 KB (36,352 bytes)

The file tuxmath-1.9.0-win32-installer.exe has been seen being distributed by the following 23 URLs.

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_es&type=PROGRAM&Expires=1455363545&Signature=BpbPOMn08fYXJebG3szG4o7QItI~hsSNFa4EcxDgqair4jdXicW-qqXVHjnZaEG67aI9aN2xiGV74Nfr51y56H~1JV96opR4WqcACxbaD~OSZJKijEcvza4YZ9oM4nZlPc94cjdmrN-y6SnblACkHBa1UVcF1eOUU~IL51-cbgY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tuxmath-1.9.0-win32-installer.exe

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_es&type=PROGRAM&Expires=1474973382&Signature=G6OEr7f8Ssw-dOIlBwS2HUYTQkIDZcU0ybUXhtIbnOwgi0m6Hn01r9aL~9vVb~vHHK7MjzPwxOWA3AAmfAJPN2CAnAWZvyLUXQvPhEaeD7b55MmcwRlfMdyxtbeYTUmM29ELwvLJd7XhWx5x8ejCnVMcAAiA63MzDCWlAaJoj9Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tuxmath-1.9.0-win32-installer.exe

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_es&type=PROGRAM&Expires=1447330460&Signature=d5OJVVBRr9bZWkDRm4hMnYPJF9Dbu4n4MIyb3X24vvhz2RBz73ng09evuwyP4quCuMBTWtbMwfi2OCuLacAZKl8V2tNKI2wJaT3VMqQnjm3zXMo4~9FnD0FrqoyCAhvnPYdriii3lxQuOEX~-Y4QAfxA0ykYBIkzwv55DxpvACQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tuxmath-1.9.0-win32-installer.exe

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_es&type=PROGRAM&Expires=1477915184&Signature=JtyFtXZA1-VRywCO0EfbDQMYSAbjwJWRggmtHlM47R2MutkZUAasB4kmjV3ncdTsmT~ilBTq5IXaVZLXWL0JqrTmNgjN7-DWo3tE1UAwPm7BNud1C~cLQXjCZpWJQ1EtkRicFDdqqeA3BZnMI8LN0w-1~KdjwSa0CCxe~7gokxo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tuxmath-1.9.0-win32-installer.exe

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_es&type=PROGRAM&Expires=1430398285&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=X7C8KJ2HrjLO4AOx-2A3gONlLpWDR50Z3NCNN~DvuywvOswJ7ry5wEe5tV~FDEZLYAmbORi302lUwYs-rX4BgfX0Ep3hPrhxN0fHv4KwjRa-CYRxb93g1ueMA9bRh14XqIrrf~QLmd5vlG4nufnCTZvr4UEs1f5dklzf0ZNDUjw_&filename=tuxmath-1.9.0-win32-installer.exe

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_br&type=PROGRAM&Expires=1457517619&Signature=asUd0a5FPz85BmZdWPN2THSnkD8eWIQa-2FbS7Br1268RT5qt7xTJGFL~HwULEEx5vW4dxQD6ULCyoIYjWGPc8aplCr4dJ8y23~j9X1ub4LNKsxz-9Dq0tYRdI33lC0OQiXzrGtRFyBkmu5w4zecXC1F6~9lX-7NNVspW~ofGiw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tuxmath-1.9.0-win32-installer.exe

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_es&type=PROGRAM&Expires=1476791274&Signature=AYLs-7VdimYhKgwvhpb-gssE-oCvkYz47A3a0Jxi69Ysx6dmu6N3dn8J7g9PKwZiPh6NLOdkiIGNcOncQxqC2rg4Ma4hghJSLqsUe1STl-tAgT8GLbe4ywQ-WU08y3I8fujTeeapujeA~Dbnl4Vtk49-MKf0wF6JpLZ5sH16Z98_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tuxmath-1.9.0-win32-installer.exe

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_es&type=PROGRAM&Expires=1476190665&Signature=Y6Gnz2iq1Wc153W6oek54NALCoi7IzN4VCTc-2dqTbgu2sramjzWQ8SCrZQa7vUBe~RCJWBKn1jI7ai38gTN6i~JuUe1tcPKPjQO8aSuzuvMnaLB9a0kIjsLWZeJiWR5Hxp65NI7x0T6-B9w0Bt0ND-r0A9cVC~zIcGPx7FYsGU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tuxmath-1.9.0-win32-installer.exe

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_br&type=PROGRAM&Expires=1427886074&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=T7Q~1x4y8kzgDQkiD1N-N5uSg7miJ9skSzbFtJtQqzXeTmUBZFwOTsQmVNNRY7kEmHnColi47xE-IOt9iMKWSnZFFrAOucZ9Arg4Ou1SFddMN5Q9G5TKbCc~2RgdkSto2W5UCVSzZOerY5-FYGzFHyS2kxaEjPLwE12OXGulJNk_&filename=tuxmath-1.9.0-win32-installer.exe

http://gsf-cf.softonic.com/0bc/813/.../file?SD_used=0&channel=WEB&fdh=no&id_file=33826&instance=softonic_es&type=PROGRAM&Expires=1443055742&Signature=X34K4MNZfbbAdNtwQDlSXCgN3i3B7n6es1J0hOE8R6zgl~EGaxgb4~qVYSVJPPpMSS9pxOvqUwq9YJfhFRkYd1CjG5Ifhl~bSV9NZBCqgqufca8tCiEkHKFmYnKsYEKxkGIJaaD4cuVKad4gLrs5yCXcOYntB4re1vnXsWeu5nM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tuxmath-1.9.0-win32-installer.exe

Scan tuxmath-1.9.0-win32-installer.exe - Powered by Reason Core Security