1-eraser 6.0.10.2620.exe

Joel Low - Open Source Developer

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
The Eraser Project  (signed by Joel Low - Open Source Developer)

Description:
Eraser Setup Bootstrapper

Version:
6.0.10.2620

MD5:
3880c0fd3083474cb7fae16dc62c747f

SHA-1:
f6c4003ef93bd226a37ef9a86dae4aa21cdbc8d7

SHA-256:
a09787812790b59ec3d36120788ae9f80b7bdda1e2d7a17a46d8112324632737

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/24/2018 4:17:38 AM UTC  (today)

File size:
8.7 MB (9,110,456 bytes)

Product version:
6.0.10.2620

Copyright:
Copyright © 2008-2010 The Eraser Project

Original file name:
Eraser Setup Bootstrapper

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\1-eraser 6.0.10.2620.exe

Digital Signature
Authority:
Unizeto Technologies S.A.

Valid from:
5/30/2011 8:01:30 AM

Valid to:
5/29/2012 8:01:30 AM

Subject:
E=joel@joelsplace.sg, CN=Joel Low - Open Source Developer, O=Open Source Developer, C=SG

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
69719A06132237347444BE9AC85360D2

File PE Metadata
Compilation timestamp:
5/21/2012 8:13:25 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:N4kVBD0NXBaNHWW2jRwbCSri693//PgZq5AEix+dvwAqUW3e:mkV5IjFa/g03w+dvwyWu

Entry address:
0xF32C

Entry point:
E8, EB, 42, 00, 00, E9, 79, FE, FF, FF, 6A, 0C, 68, 48, 23, 42, 00, E8, F2, 38, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, CC, 61, 42, 00, 03, 75, 43, 6A, 04, E8, D5, 44, 00, 00, 59, 83, 65, FC, 00, 56, E8, FD, 44, 00, 00, 59, 89, 45, E4, 85, C0, 74, 09, 56, 50, E8, 1E, 45, 00, 00, 59, 59, C7, 45, FC, FE, FF, FF, FF, E8, 0B, 00, 00, 00, 83, 7D, E4, 00, 75, 37, FF, 75, 08, EB, 0A, 6A, 04, E8, C1, 43, 00, 00, 59, C3, 56, 6A, 00, FF, 35, AC, 5E, 42, 00, FF, 15, 0C, F1, 41, 00, 85, C0, 75, 16, E8, 4D, 19, 00...
 
[+]

Entropy:
7.9976  (probably packed)

Code size:
117.5 KB (120,320 bytes)

The file 1-eraser 6.0.10.2620.exe has been discovered within the following programs.

360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
www.Toolwiz.com
About 1% of users remove it
About 5% of users remove it
YouSendIt Express  by YouSendIt
Publisher's description - “YouSendIt is the most popular and secure online file sharing software that allows you to easily send large files and email attachments.”
www.yousendit.com
12% remove it
 
Powered by Should I Remove It?

The file 1-eraser 6.0.10.2620.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/f6c/400/.../file?SD_used=0&channel=WEB&fdh=no&id_file=16753&instance=softonic_es&type=PROGRAM&Expires=1476107424&Signature=TK7sK8QfiY4KwN-v7XuGW6wYwd1udML~R-2KImic8KzvYDQqcBdhW99syymUMgUTFpNRWANxQER9XweD8X26Q1zOnuTkGr3JGSBmcW12kIMQ7j~~9bLJPKBh~SLUWBPqasxQoTf5TuBvCVuCK2l9NKprzHb481Omk4fHGa2RMlA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Eraser-6-0-10-2620.exe

http://gsf-cf.softonic.com/f6c/400/.../file?SD_used=0&channel=WEB&fdh=no&id_file=16753&instance=softonic_es&type=PROGRAM&Expires=1477391009&Signature=GhXFwMVJYT1QiLuUH~3iRycQXt2N4aofwWSHxzWaLlEf3a3fZ8EqT4MqwqQjJMdiG~6~buPyiMWajS~UV7fM8OAVO6m-3Dn9w0bJd89ecCpHIzIiugA07uaIkM0z7awoTxhivWZHGBZ6i1sYVxsVaCB7rhMveYLz1ZsG-IMaYr8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Eraser-6-0-10-2620.exe

http://eraser.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuxCsirEyika8CmI3TyjSg9teMrDITl533IOc54bvWiLC7Hp6Dp4/aGCsAEZWIOe8ofg3XB7aZHoTqebOhBMIwSValWGo0zC7bjW6oU3A3 0vC90ZPkqA70Ex/uanE1s0tdDg7vZ S1RBgE 13GPJGdB55NME6f35X0PF0Jh8GveyQNuO9xfzD6TgK4VFoOMt/qiZMbFiMEgBmN/gk2TBdrJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugwIY591GHgw9vzC3B8rb7zdN8KBurAjuwl88nOhX0yRYYP37yJ7582uWonSSKiqZnNoVk20ZAiAKNsiZBjd8bP1I cIsNDf8NaDqYx/NasWOi8ZCFykyETje/3x1cg7fGuyPqzg9kYPR/O4YrZRHe/.../OdRt7u0msVELCquWIHReJnKD288Fsv3HxPi5RDQTr32kXgEy4PwSaew=

http://fs11.filehippo.com/9799/.../Eraser 6.0.10.2620.exe

http://eraser.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAP4WKdrThBUpzgZhfV/GPbvVkqABIjhd7xfa/3Da2hOG6jTxbg2SpxzfFIIVLxCqDnP9uyA9jSUdiG0vFJ/HA73DG8yYqQ/13/hhObKX5Iz6PPQ7fRSHitCt2wrRDs9EJV0I7GQGyT/gZuwUUwdHo5nTc1YrnqN6L4 RsJv1HuZnnECFlhpg5edMVS3ishp6Wzke/DE9tr5aUCzun6/aQizx0zeC6S1XIEXXreRZSj4TSrUob8P2PNZG7xBsxH/0YRobJGeOM5Z/OwbApWs4EawJ3RBnHlgF5/sTM21MvyyGYlASWd5z9fNToZ/8qBxTiWtUKbiFAM8SKuNEnVpyhKatK/mepY4nV46xvaJ4YbiAUruQd/Sf6WYHP8Ri97qJ8ZcCYfatC5SSvXjzJxodDF1JHLWCAb7N90BCZGhEV1LtEN2QkeJI/NoDJAGaiVfZm4tMoOzlH9yEDApIInICm3pHrDNWb9b4YbAQR6w/cTz5PaRdVVczE6iebQBnaOkdOtacrBaDezUHUwwaQFcB6iznPgPJ2Geg1Hgqv5g6/.../D5PXOlvILJKJ3JE1gSX 7MvW9IlGu4Fgc76LLSfH3AeBPCBQLGLUNzg=

http://gsf-cf.softonic.com/f6c/400/.../file?SD_used=0&channel=WEB&fdh=no&id_file=16753&instance=softonic_es&type=PROGRAM&Expires=1477888797&Signature=L2DqYJidzxrx~RCzhmXgqqzIWG4cukMenHeCzkEALf~ZzMX-OPgh0sjzvPs33YY0qE~QA9wWHt9w9DGPLn3ag8vIM2snijfB-FdXLR9uH60RCsr9XVu8YpSKusDt69PWfQ0c0UIH1aZHdMVAwrASglZcwgpET9g1Y4o66W83sbs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Eraser-6-0-10-2620.exe

http://voxel.dl.sourceforge.net/project/eraser/Eraser 6/.../Eraser 6.0.10.2620.exe

http://gsf-cf.softonic.com/f6c/400/.../file?SD_used=0&channel=WEB&fdh=no&id_file=16753&instance=softonic_es&type=PROGRAM&Expires=1476087402&Signature=fe0ME88n8qwopT~4XySpBTJlmSFxjfnxiiD-NOQBygzKKW6mZIvb20h2Q-3ZFERzscrWuNycGL5gtUAe9wbt8a-x08Dvb~In8oNNDL3q2lrksz-~A~Vld0Gzcrttm4Hy69344LBEBOdEQS-Vl9i-QJtfOj-LZ9iZMboWLI1NTvI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Eraser-6-0-10-2620.exe

http://www.ranchsendgift.com/CT_othWBpo U0TWuKMe6rkIhy23PUEQrlIfjMJlcYUHSIw9t87bPc6CsDWA7H o5MPIckeWa9TiJ4ElzX7E8SXNofRyIlpLZFV RRkT7O_ddOfiSHWv6544x56 SwOiJHKlKxbRAUxPhgdNMSxXBcVWij7LrHx85QwQQ5YjKggiKMPlIgyGae6e67rYBIFreJB8KOBT8jcCA3LoN9d6vsCLhsCBpmg==-G1MAAETdlqoh7ffhoZmC6LQIykUQHHKmgXg7UGZJIBBsjD350mkE8cbPGyfQF 5 0Th2TA5Is4RRb6ToJheHImtmGuam4Cc=

http://gsf-cf.softonic.com/f6c/400/.../file?SD_used=0&channel=WEB&fdh=no&id_file=16753&instance=softonic_es&type=PROGRAM&Expires=1474428075&Signature=SOJNrJyJm6rJe9tO-q26Y3UD-LDA8e8H7pfb5TvJLyCaKgnpp6nNZDeiNhkCJGrs-F3NVhFBnaJNUECQCfdTDbRbQ8f9HKhTHGksjARmusrAHgv64TxpF59VqegAeB-Ndst1Gts8CqsJhhW9bUmbaMEd63saz83C5v4Ngg-d21M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Eraser-6-0-10-2620.exe

http://gsf-cf.softonic.com/f6c/400/.../file?SD_used=0&channel=WEB&fdh=no&id_file=16753&instance=softonic_es&type=PROGRAM&Expires=1473914854&Signature=FNiUdctTXi~4QXT7KVyVIMItvr4M5ZByE4Xuix-cxuGiZpv3imCsKbSOGR5ToH1K2amCrGZNq-tlkdTwmLYHEgM~ePHGxUenVylebiLzW98ub8Y3gUYvScbQWarBHq67derSfARvFrOTqqebpe~CuZu5wmmFy13-PmtU8i0zHmI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Eraser-6-0-10-2620.exe

http://eraser.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuxCsirEyika8CmI3TyjSg9teMrDITl533IOc54bvWiLC7Hp6Dp4/aGCsAEZWIOe8ofg3XB7aZHoTqebOhBMIwSValWGo0zC7bjW6oU3A3 0vC90ZPkqA70Ex/uanE1s0tdDg7vZ S1RBgE 13GPJGdB55NME6f35X0PF0Jh8GveyQNuO9xfzD6TgK4VFoOMt/qiZMbFiMEgBmN/gk2TBdrJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugxI3fKZrFBxEWmazzgmG5gwaki9cVgPSJ4UcN2b62 Pg49riJq/4cjtHPexHOgHym3FWLM5MfIb /35Fd96utIY2lv 9GHZiYWW/vq1W 6fUNZ5JMBnDxRA5Ma8gSUray/JiE 8pMpo5JRJ04dhZ62VFim31PWXOAy7r/woi3VYQ3ZW1/DVJs4lPOMg2AbEjfdeQxJ68gt6jCtWlzLN87ik42BOOCWgyVdGTKKvgepqBDKvW/.../OdRt7u0msVELCquWIHReJnKD288Fsv3HxPi5RDQTr32kXgEy4PwSaew=

http://eraser.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAP4WKdrThBUpzgZhfV/GPbvVkqABIjhd7xfa/3Da2hOG6jTxbg2SpxzfFIIVLxCqDnP9uyA9jSUdiG0vFJ/HA73DG8yYqQ/13/hhObKX5Iz6PPQ7fRSHitCt2wrRDs9EJV0I7GQGyT/gZuwUUwdHo5nTc1YrnqN6L4 RsJv1HuZnnECFlhpg5edMVS3ishp6Wzke/DE9tr5aUCzun6/aQizx0zeC6S1XIEXXreRZSj4TSrUob8P2PNZG7xBsxH/0YTDRjDPW87YX7Z6adrcfSCeV7cKa0BS/nwXAPaJ9qN3RMK5S7SNdSABVsT5KpTB6LRDkDpjLhQgZrAtOl3s2xBbm/QD myPb N9sK4Cp8hccDhoFXYD C4rdyJTBMobW5oOPGF6ymu cjcPO2CoHxPi5 7y29/QUwwonBnji88g9lAOGVNO8LSPP3pZOgH2U1yVf7QmRBuXxsaJSPe70chdkg9AJF7279Lik5GqkEMXnHmxs2ZUabQB834lVS8re1RacrBaDezUHUwwaQFcB6iznPgPJ2Geg1Hgqv5g6/.../D5PXOlvILJKJ3JE1gSX 7MvW9IlGu4Fgc76LLSfH3AeBPCBQLGLUNzg=

http://gsf-cf.softonic.com/f6c/400/.../file?SD_used=0&channel=WEB&fdh=no&id_file=16753&instance=softonic_es&type=PROGRAM&Expires=1477548127&Signature=K5Y1XMVhh3bTN-2ej~Ma7shYY5Z48RxtrjFYFZLRmKpAAn07AXe9eSryLa~BG~0WYCjmWand9BJhqP7wOjI9Ts1CJUG4vbUeYQVI0sfxRFitUb8bHTZg6TZU80bQ5xl4QnkL-TZEmQxF1N3IziJJ6eTbxXT6R7GjUbMv4r5YSEs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Eraser-6-0-10-2620.exe

http://gsf-cf.softonic.com/f6c/400/.../file?SD_used=0&channel=WEB&fdh=no&id_file=16753&instance=softonic_es&type=PROGRAM&Expires=1478774271&Signature=OmpVISsgntsVCea8-cCifJKN2MrhJGOCrc~Xzhh1bJn6Dz73G-pK5Uf4lZhWMgRL0zoOG1NqtyEyaWiFEdYVs5DeHeMmpK~wL29wmhMy5ETgu65GPsfsNdSx7TP2r5h3c3wcYFF8TOUm5oiCvGBHI5FyxfIbury4zacg2tqJcqM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Eraser-6-0-10-2620.exe

http://gsf-cf.softonic.com/f6c/400/.../file?SD_used=0&channel=WEB&fdh=no&id_file=16753&instance=softonic_es&type=PROGRAM&Expires=1440662526&Signature=AofClabACQVin7H5ES53DXc0v65ddQt5RnSZ6nvCChvsxxT-eiMtz9Sz7Bb-N3UwJgnexnCnzMA5Yknn4~zWjSdN~O2~H6XfyvyzNlf0qXiPWn9Kl9Z3Bl~Ig5nGAnd7GXnG11IGuQFpAzxOQFX-VuNuEr6BRcXDEwVhJaQq4Ik_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Eraser-6-0-10-2620.exe

Latest 30 of 93 download URLs

Scan 1-eraser 6.0.10.2620.exe - Powered by Reason Core Security