xvcd.exe

Xequte Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Xequte Software   (signed by Xequte Software)

Description:
X-VCD Player

Version:
2.0.0.703

MD5:
5235616545dc08a4cb00e84446fd3e4a

SHA-1:
0fdac79665c9234659ee9ee68a21d059f8eaf2eb

SHA-256:
78018dff6efb48e14008303dd5114b14e39a8322b6f7723a848cb193baef5f9f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:28:01 PM UTC  (today)

File size:
546.6 KB (559,736 bytes)

Copyright:
Xequte Software 2001-2009

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Digital Signature
Signed by:

Authority:
The USERTRUST Network

Valid from:
9/14/2008 5:00:00 PM

Valid to:
9/15/2011 4:59:59 PM

Subject:
CN=Xequte Software, O=Xequte Software, STREET=PO Box 11-301, L=Manners Mall, S=Wellington, PostalCode=6440, C=NZ

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
2DF137D7B3DBAA0226A570A83383ED56

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:g2UBk8wZDkA67xqdgoWuJ26iGuiElyi14M+WNNynWD6YE:g2UCR6dqdgE2PwiydOMM6H

Entry address:
0x9A54

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 72, 96, FF, FF, E8, 79, A8, FF, FF, E8, A4, CA, FF, FF, E8, EB, CA, FF, FF, E8, 12, F3, FF, FF, E8, 79, F4, FF, FF, 33, C0, 55, 68, 02, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, CB, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 06, FA, FF, FF, 8D, 55, F0, 33, C0, E8, B0, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 23, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9510

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file xvcd.exe has been seen being distributed by the following 36 URLs.

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1421980915&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XBiHB3oS-G4nbRt2ekR2zanNGjRdxy0D3ZaHHgD0N~lrr8qi3gcCHJ0riZ9iWdK8T1MbIfHnxRwcunRp8jqXwcb2owaRbt5htTb-eE1pXiib3KW8zzsvv5QCYtqVGiAMJKpi08jqlMuciKwBIfqxVtG6IFwKHSqEgmYNxqn3xPI_&filename=xvcd.exe

https://x-vcd-player.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMOviqJZtpsP EeTRnawwZd8kfHX7cYOUNPgjAY4zoCCR4Oc890SyB7aMrXjcF1QBr8gPFXTl4NnM60yi3vqhMjehJZEIE9Hh2uCgU60FyYYj3PCTRb4zNAswG73qGCqvY=

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_es&type=PROGRAM&Expires=1480860226&Signature=VgGsQf4H1dfsBPXPvcOHEvNYXFKLTDJeKz0o2ObFyBEca6j4qzlN-1otAb-93ZThhWB8QJE4mKP7K35wNrudp6y~qd6fw1C~5WAbkXhxbaHqzLMnu2ZokhM5xZBp9HMRdlDLwLH9gXEQnQTMf3QXAnzfZGqFrUzWoSoA5dXVKSI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1477048312&Signature=ML75K4MmDGCVateyONG7a3ckWdM4Cbmi-twxgmyxYR~YCxtWOXKwwiEta~VBkhUV0I-bZ9UlYmNY33bgyqAsa40bUDV2E40HwZJAJup77u02VoYSvhjpn-y47uKgGjWb1NGXXQK5hspnlLUjDpAK131PQxWr2k3QPQ9cMb45N4o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1441245268&Signature=ASwHkthxxFsIJQpRUQsZNIwxN3Ht3HVAtwz6ipACcz6VzqB-EVAxq6qMRicbRFHFXsSNd0az8qMNMKMyPSzg5OSJNTir8ldcEP4UR~MyCVyMTTb6WZY-gS85bha7UDyN1beCh8EvydNW6Y-xQ4OcV5tYws5zp0SMPQcIpQjSxhw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1476506538&Signature=NGkIhETubalJ7bamST1Tl3nDVx2I3a6VDoFBIuiyKaHEkKfDpvNXSnqoUYIhicZ3vMutrHiLESUQq4PzKwPGQm3J-c3U-VgRbIMJwUE0CBqaQOy~psBU8MLfVFhSakMYw69mBixrZv-eMc22wCm8~nZBwKjDfNCOxjGyLKq6LrI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

https://x-vcd-player.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvlbaqpdHqn8d3TA/.../cT7rjIQ8CU3Ez9c36x2LR0B4WfxlNl15SH0kp8wQ=

https://x-vcd-player.de.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMOviqJZtpsP EeTRnawwZd8kfHX7cYOUNPgjAY4zoCCR4Oc890SyB7aMrXjcF1QBr8gPFXTl4NnM60yi3vqhMjehJZEIE9Hh2uCgU60FyYYj3PCTRb4zNAswG73qGCqvY=

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1477325473&Signature=c7yrCWkV0qXGz9CI~ynZTtGKGZ0mtAr0dVynvdBbimv6R58NX3RHLyovxaUz-VEZrG4bxeR4IbDJ3S638ulkKghfjB-FkBIW6tUw2a-anoaGR4-HukDEZWKaV6kUpq8dyvwz53Hzn-q2474xMG8Z9CjeJtFC8jiuLgY4lP4nUVk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

http://x-vcd-player.it.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMOviqJZtpsP EeTRnawwZd8kfHX7cYOUNPgjAY4zoCCR4Oc890SyB7aMrXjcF1QBr8gPFXTl4NnM60yi3vqhMjehJZEIE9Hh2uCgU60FyYYj3PCTRb4zNAswG73qGCqvY=

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1475635920&Signature=SUZRgDznHNJ931Wz6md6~EGPJ9xTBjY51Vl6KvPL~UpNpqjDizivTZtVVZxeSvWtncAx2cQskzFDCaNxM77w3drqvtk0spMHbY0HeDgK0SeBQ-faJIfkmE62~dFyl~kV77MOVOBFT9ojMpknbaUjlMZqU-n~0n~F2ckX2TwWIr0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1471748055&Signature=DBq1C4SRYwGNQy6VecuGCu0bqgH75UZsHZO2W8Y85aabKzXp33BraJxV5ElPx8r54FRuYWzgzGNkaqwunKXyMjSO~45bEwhG5FVy0Xn8i6qQqp6PTAXuPrd9uyWixZSJE8qLgOYVmKDjhwO9AIxYDglbfSpHwPuaAmFr2BfRNm0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1475780142&Signature=hsMxoTQhhLemqn~XLVTaUlpD4b45C-dP8eMXDOW4VwiyO0lecnc7eeEVnl3W-kvlPwXv6J-FAYHHMO7tcxb3J7vSlIMGuebfhUYXsKNrKSSuHPWl6vC1fQhRWuswATovA8JBDK6ogtOD6z5pCwb3gbYXnykyKfVTXUgV0FMiu~M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1456123880&Signature=g3KAFO38qgMG~1nJJqzI9iTub05VIP8vMnqQbnb-yCT6h-B~OL~mMQRRKkt5bISvJ2bLzPb3I1exsXv3FleVj8HbDRSQ6qRJXOJUTES1t~AHtGc29AlgfJR1Xkdv4koqWzNKps9lAosYeB3-P1y-GC8FRAp8LGWvoodRxaeus5k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

http://gsf-cf.softonic.com/0fd/ac7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27208&instance=softonic_en&type=PROGRAM&Expires=1469636699&Signature=TY5AoafvL9PX~G~u7diI---Sw21QjVnTB3OlnQzPRwChHFwfzz5TPhtj9JbXG3EJCkSKb2SfldBkx9aKfou1Ywh5KDtKIDUD9Fo-6KvoNqgBI8bgsvDpDMfC148t5xbYck~A7AKPh4Ozjy-PdsFUGF5gqDSIXCyUdqDNa2SWOP8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=xvcd.exe

Latest 30 of 36 download URLs

Scan xvcd.exe - Powered by Reason Core Security