xfire_setup.exe

Xfire 2

AVG Technologies CZ, s.r.o.

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Xfire  (signed by AVG Technologies CZ, s.r.o.)

Product:
Xfire 2

Description:
Xfire Setup

Version:
1,18,0,3410

MD5:
5352021330a7858905421fc4d0174060

SHA-1:
08259732b6261acd54809ee4e25525aa5c85ca0d

SHA-256:
0d737bae9e7d0b15b9342f376c15ab34cd823d34830a8b3be97a555236bba4f4

Scanner detections:
4 / 68

Status:
Clean  (4 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/27/2024 8:44:22 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.Downware.1622
9.0.1.0329

ESET NOD32
Win32/OpenInstall (variant)
7.9190

Fortinet FortiGate
Riskware/OpenInstall
8/2/2013

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.131208

File size:
524.5 KB (537,128 bytes)

Product version:
1,18,0,3410

Copyright:
Copyright © 2013

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\xfire_setup.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/5/2012 7:00:00 PM

Valid to:
1/5/2015 6:59:59 PM

Subject:
CN="AVG Technologies CZ, s.r.o.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="AVG Technologies CZ, s.r.o.", L=Brno, S=Jihomoravsky kraj, C=CZ

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4984489DEC6200DECEAD93D4732CABCA

File PE Metadata
Compilation timestamp:
5/9/2013 6:25:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:jF2KOVMVnNg0BgiBugGmh71WQZ2G1K+OssssH19gKssEGq5Z:jF2KbHBgZmhPZD1U19gbZ

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 1C, 04, 00, 00, 53, 56, 57, BE, C8, 30, 40, 00, 8D, BD, E4, FB, FF, FF, A5, A5, A5, 6A, 7E, 66, A5, 59, 33, C0, 8D, BD, F2, FB, FF, FF, F3, AB, 66, AB, BB, 04, 01, 00, 00, 53, 8D, 85, E4, FB, FF, FF, 50, FF, 15, 5C, 30, 40, 00, 66, 83, A5, EC, FD, FF, FF, 00, 33, C0, B9, 81, 00, 00, 00, 8D, BD, EE, FD, FF, FF, F3, AB, 66, AB, 8D, 45, FE, 50, 8D, 85, EC, FD, FF, FF, 50, 8D, 85, E4, FB, FF, FF, 50, C7, 45, F8, FD, FF, FF, FF, C6, 45, FE, 00, E8, 45, 01, 00, 00, 83, C4, 0C, 84, C0, 74, 15...
 
[+]

Code size:
7.5 KB (7,680 bytes)

The file xfire_setup.exe has been seen being distributed by the following 44 URLs.

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_es&type=PROGRAM&Expires=1475316271&Signature=gfn~VLftM2Y08gW5xWhzOYZe2m3cCBQszI711-K8rL3bpicV1JreHhJGlJ-pvTBAhGHn6ScI03MWUxcCtu9S05a9~JvqLVhXZb~7LO4OWNbPYKoEK-lSv2bf0rzjEt16dgjRrQTCUroYM16XzrLmNgjOfpe~9AB6~mzk4c-Jh7E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1485635031&Signature=RxSzUSjPZ3vq3FCsS-lZB7NUH5kSaRs~hKwp1yq5bFzVYwNGzSVhIUIIia--XXfmE6eqE-ChCNlxDerb6vTLQLF9aTP31sejtIHTIGVTR8~a7LVYXqDoI4D93mRqvGscDdHQ9E7uwzbet8S9~8zWYc9HX2lM8HZttIqYIQibwNg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1485906451&Signature=Cc9u2dElYs4pONnQbo0hfolZgsAJ7duVEHF00jwceriYIlXzbkLgkwCM70JO4hDlf6Wwx~umKsjP86~4ZJIk0HrcqJNCiRTXAzTdX8uBKK2tcbWrOseNHruCqtO5mbI4qLTOLi~gH1JtOW5AMec3MIpXuUcMUCi733R62FhsXn0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1478927395&Signature=WHmWMhdece-uDU0BrKnEvylKScdh-qS6~u6dBuvyn-8sHqdV715~anTlmFzALlZwgFH8Bt3tjuVuVdN8ujXWTHjmxR028JycxSQqK6oZLdR9Si4O97wVftbPvuBCeOhjI4fdGhuDk4r5RhxfxpeitL8txwoWLrJAgSEnzDYA7FM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_es&type=PROGRAM&Expires=1462185034&Signature=etbE~OZ5TEeVtzberJxzQ3O-2gAG76ilb4ibkelnJzh0Z-hX2Wq6YopJyt9P8k0jOhcKPFa08Se5B93mtZ7eTkW-UX~ujKCXTR9zhpY3ixSAWjSHAnLyqE228D7cgHuj4z~H~ywk0H-s0e-L4p1QrnoE0Ad3XLOveSGMorjPio4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_it&type=PROGRAM&Expires=1483510885&Signature=cpTdTjnaaN4dhe38BfMULTP0TE5fVEiAJd99YMl~Hebas9JjFkvUSwR-lL5OaMeLqJTGzCsl59763-O-6uVVK6kGFgJWhi6~aDWYO5siayjqEcl95MgyVfzHCaYKtmr1Ng6-7FxpFII8P~4wsTLQwscLlhpJy7jGtiWR9xuKZNc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1454558093&Signature=fnXEZSVfRO9CIgTcLi4rOW32IQ8w~NiAlsp-Zsa4xT6B-7atqvigbe4MHRWk~aESVsRzB9IUnWzWTGbcGk~hjj5EzftFVEuSOlZ8Be2Wnf1OvP3lvSaWYfea6rR-OeV76Vgjf2uFwDNWarF~juvSbGN2iJwSgJ-nVZUXSEAxWTw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1465528302&Signature=G6fZXaPkBiXiw1NxMp-r~0UbIdRj1XnzPkqO5kgLdHKCAW2FKNQ2x4Tlaxp6uAPsGyszDcofD72YAtZoZ2N6Kznixy9Mhe96JlEPps~mAMB-tHar6uMhYlan6wvDuboUIv-Ajh1gkC7TPpfkocYTo5Woko3TZZehBErU3H357bc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_es&type=PROGRAM&Expires=1476956992&Signature=b~85RUmlevYAiwS4dzBaJlQEe~xlzEkiuCfNo1Gd05867uiQ38gHZSWMCEj6VWv3ED54vyVSFm~s~RR5xOc47VK6bkWjF1IyYGHKnrJjJRL0LVvg80XSZorKhbmFvBgXuO8xXakNIXo2GyZiDVyzpRyHxEnIMO9FpF~dErw3i9s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_es&type=PROGRAM&Expires=1471253820&Signature=aRqyBlQM6Cv4C2wT-EPnVeD2rUf38gBdZ8bNKB0z~~GtmZgdBtUQXpdt~3dQTOgG9Q1hkb6anrn57nVeVcBqiNZTxE8-m50Wszh3Y0Q6vqK4MmqFuSY5riGtU-5rCFHHZvb-EPzTo1bjunpFCOmarWzyYGgDmfZ2-7ZxXcZHLyU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_fr&type=PROGRAM&Expires=1459901344&Signature=QVOH5UeLX6SazCGruTXDp8vptA9YruWAMIVUgjY1tHKMN8g-XGI4SN9fnZzDh89pkee-~G2oer05y84tF-FNdVm6-u3ULcyV5l1q3mumbBxoe5Odf2--HBGTULVaDMsRXiGG8BZf6Q06Fa8X9Bl8H0Wdyx0zMJ14WC3~ezDoWcA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1459630107&Signature=fXlMKhA63qNgcbKEhADiwFt1C4VNbCBe5Ckf03SLU8kLE7wAN2LOg2hBhwpoWcjsyKJbOgVfRXpER8eHYITanvbizhdpORFyj8kvlW59Uyn3nrco2QUfr-TLaEv6AnSAEUb0mj3e8ps5qJZoFt0pOey5OUQ64XOh~B9o2FdxgMA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1479630202&Signature=LWU8dhdLuytvmALxsiWOQ3taSq7F3GTFiHSuZ7zNlv-kwZoMlNBfUkEtNiJcRC6kI02dswJD-FmzLnPrszLIBjqai6kAdUOLzQARTZ8MvAQK0O9KOitvlxFa8hWdWvLdJbz1JPCH2VM04CysCLBG7z1LjAU7O9xPW37Oqhe53Yw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1478772040&Signature=YrVIk0bBiR7vRS4lkvJlV3FL7J9tZBUKhv9j2j1NgTNLtv9OHegUdJOEiQgjygP5zf3OzE3iD3dRyYq44xzN~NYByPYybRznQ4bOrnnJ84h9vnZ4dyIgluQy7~4WQ-sXpZ9C2974gb9w5TRCbWMFN3Dk82xF~Gee8vuqB1-kMPw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1466112987&Signature=MGQ0VN7rZMxgD5GEJ2YaGRZvCQLknKAD2RC7ROOz5B85DPwRNPxRcdGOZNVpI9wCSa7HvO-RSgYMkwldS61csgFaYQD-cJLdxdKyuQ0OpmdWmn9Bxbmke3mLIK69kaVw9r4yrDTODSGpxwOe7P9~-PFrJgTMwM1y365reivhGVA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_es&type=PROGRAM&Expires=1478059132&Signature=JkU1NwwcsVGQabDIjG4acxm4DpFj5N4ReXX8VMBEkSgY9CLR0m8YnbMbxsHp9JKUFIsx9MtD6Nzai0Of45TIqi~eQ8uQtRTcIdd-j0qzskCxzyP6ePr3W7AgqUczYWV4XmlaehRvWPaS0ggMJYEjva2sm-H0GUCSS3B9BGjTJtQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_fr&type=PROGRAM&Expires=1477714213&Signature=FPayn3NmLLLauSlDONlrX5BxuYsDJC~RzQDWWQLXtiLkYCdZtAg-jzOyqsyiLoELay9~y-V9nCkzSNqGyDyTwu5qlyu8C7bYx6MXS3vGHhcXxv-CIZ13hFjKqFpFqcqR8ycIUkuAq9cxecfAI-56c55z~gYa40sFxakYNeFo5x4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_es&type=PROGRAM&Expires=1453183484&Signature=NcTvvENpXp0NsKeXK8SH5ex-PnLQymBHGOUULpr5iP8H1bb2QF-WEHoOn-QrN88xfba9-OhrR5mnus0akd9v95Dau~aEO-ntlgyvxluZNZnQ29CI2zszBkIhbGoIHRWFtiM1pZvJhycvnJ9BVhRCrMj-FnLCftwrad9UnylGakQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1475271487&Signature=IcrfKbirnqneMbN5oI7P4B3ckU-9P4vc4baHZOd0B25Cch~h0Eww2HMwcouVAX3TKT5vQdQ0D4v4ZWF3JicBxZ2w4Tv2sFCfo62auhm0eq0rkyfA1HZmyWOKmCTaUe-f0m0-4xEnubut-cd~GdiuJwYZ8bF5G-cELz1iLUX7zpA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1438565290&Signature=g9KXnyq-22oc7Zna0Bfo1hTZNhNy5L0DhXXrmtJ3AfMRrV-HLqI2sm7djCexuMD2CZKm2ZkR8acsQVyGMIUFdQN9smJ9LEDV15cEiLZjXP11yu2JPDQ61ghHCzPUTBLBQUUlb71qa337GJVGFb9Q6fX173rRDZPg4FG3soFl9jY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

http://gsf-cf.softonic.com/082/597/.../file?SD_used=0&channel=WEB&fdh=no&id_file=32023&instance=softonic_en&type=PROGRAM&Expires=1471492376&Signature=IEn2y8xVMSlfzOQ4~8FIxcgFObTC0VXdxqtF1m7t~UaaXKDettRoc3YiKwLXJc0y7RjqD062z4EyGkgLOKFchSfJogiarS4gUun-KQ35vq9BH~lGxqwakMZRGT-g3LQKdsk6igJ-4i0Rr9El3eTMknPXp0jQFlYXHeJfjCw1qOA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xfire_setup.exe

Latest 30 of 44 download URLs

Scan xfire_setup.exe - Powered by Reason Core Security