vidcrop.exe

VidCrop

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
VidCrop

Product:
VidCrop

Description:
VidCrop Setup

MD5:
44c679ac6cd6330373e06add5eb5e405

SHA-1:
92abf0e9e8cfcc9ba563ab5f83e4453115525863

SHA-256:
0bb4e7830f466e781509a0358f45f9e85be1a0683371b3d97dec5c62f8777350

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 9:51:35 AM UTC  (today)

File size:
16.6 MB (17,379,585 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\vidcrop.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:ywviCjM8M8iJ0wpAR/KMH0lF+okCqMdhUIerr9cp0:y92lhEZ0LHWFxkCBJRp0

Entry address:
0x9B60

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, F0, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, F0, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9998

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file vidcrop.exe has been seen being distributed by the following 23 URLs.

http://gsf-cf.softonic.com/92a/bf0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62531&instance=softonic_en&type=PROGRAM&Expires=1448832427&Signature=DfD6grKcPmotXo4ktVjlBMNaaCrPPlV5WFEXvMfwrs0CtOl-XFkmRwTGcUp5NU8EKHM1wf0VGIg7mAihguOz-NRnZ0x43bvWYcmhQ0YlFmXqSuxrXu0PyX2xmV7TderZWjgRm~kQmYeuQqyH6r85rO6TRLEAOycqfH3KclGXjag_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidcrop.exe

http://gsf-cf.softonic.com/92a/bf0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62531&instance=softonic_en&type=PROGRAM&Expires=1442216089&Signature=SlQZDU6vCFKakH3zhihHNLtuIF~GGuHnnCS0OQQ9AQT-dkVnoSHsF5ZTtK3AKOFnHAA8Q2Lwy10VdPC5X~Nnhguc5x8eHnKrt1kT~dE3u5Yy2tjqunbDCDSLyQoe2lZaYgfixRfKAm-B3u~A8n5tQma-AXJUfsj2AdCg1zPSnhM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidcrop.exe

http://gsf-cf.softonic.com/92a/bf0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62531&instance=softonic_en&type=PROGRAM&Expires=1452717551&Signature=AAomMI2auzUCRXXtFeWl7bLiaAh2itbd4G~F02OP4JAfj0yf1hrZjjcp1byPQP3DBdUjw9ofb~4J8e10KHQoHqpqQe5sQIXh7xqAZ7g~dMKRcUqkknj3gSZcnpVcJvp9qN0eNxLDDmnz-Q2cIqDpQAsNgZo6V1VnvhIE66h2MZ8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidcrop.exe

http://gsf-cf.softonic.com/92a/bf0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62531&instance=softonic_en&type=PROGRAM&Expires=1478620741&Signature=gT00jj9qTAX~IiQdRMqE98gHh~HcfY5ziNlNkgBBdZwLmwbC-l6q4lNfTfx3FKQWDKsxQQaaJF0MAHux0pQiRWQjprr9-fJL0OrR-KEEeO9a9d3xnxiosfTlmKTBckb6VDarM~n3rIVKHR8iEznbZj4DYbMlrG~cU373HGKz0sc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidcrop.exe

http://gsf-cf.softonic.com/92a/bf0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62531&instance=softonic_en&type=PROGRAM&Expires=1476521859&Signature=H-6EoRlu3JR7f8R55yTunFmfBs0mB4h6OxT7hqOHj5q7CGjlF5eIPBKqpVI9HpHrY0hLi666imExtKXmRx6jjMruSB8cG9GfBUkKDEilxFRYXB-BTkfHLylRgR0DWawoBfRAjKmZQ~xt3gdSzFKIiYZHP64jP1a-DmzIlGi6xts_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidcrop.exe

http://ec.ccm2.net/ccm.net/download/.../vidcrop_2.0.exe

http://gsf-cf.softonic.com/92a/bf0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62531&instance=softonic_en&type=PROGRAM&Expires=1428074558&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=EB4x0Yd5v04U5nv36gu2HNlJxpSC22~qLYO2~9j0WDC--X3VQKY09kM0NHUcEhxH7Ns6X8YBflifbqT~GQ7R6-tO8-YFjdp9wgIC77EOHUggBngDbJ8Yg3Md5CvFalrEYTif10Xu~PbIr0UquOJuEk5CbjaOR~rl3nNKGYfXVeI_&filename=vidcrop.exe

http://gsf-cf.softonic.com/92a/bf0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62531&instance=softonic_en&type=PROGRAM&Expires=1459526529&Signature=gHUJJZPrpU~fRJydH2V4uXFis97MTF4rWERHWr6x92vJ33V4iuy~kGsbaEY28pe82i585HjXpKnRFTZ5L6tHaWRLsLWW1X8m6La1grPMibE7EA81oGAbgsp6~VDdMs0ezKVBd0XXVtNZs7epplX7triItkkEWvq0TnwbQ5mez~k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vidcrop.exe

Scan vidcrop.exe - Powered by Reason Core Security