24-10-2012-windows-password-recovery.exe

iAidsoft Windows Password Recovery

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from en.softonic.com and multiple other hosts.
Product:
iAidsoft Windows Password Recovery

Description:
iAidsoft Windows Password Recovery Setup

Version:
5.3.0320

MD5:
d6ba6fa1abe9e091d0c21c483c77ab5a

SHA-1:
27f185ec5d55f289b928c1e9bdec78c64b5a8a40

SHA-256:
3ce4e1b8f575180d2996cce63e6d6765e1dc4602f40eef5c9f99f53dedbbeab8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:02:43 PM UTC  (today)

File size:
15.2 MB (15,944,128 bytes)

Product version:
5.3.0320

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:olHIrP2FwEYlg/YJYkhhi2hbd46UPnmnrmycaF6QyOW7c2gP5bE87cQYq2FPVguz:GYWAJtXiubKunrQaFB2Il2stio0W9q

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9992

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file 24-10-2012-windows-password-recovery.exe has been seen being distributed by the following 30 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=4ee5a43f66de69b7a4add8500943df3b&upv=58bc16e2898682692d691b444cdd59ad&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E03C04C00EB1B518730AEF2A76D81F9E0163C2EB892C67F8D74936113AD4002A386A17EBDA8857656600AF5BEF1E90CE1436E3F37E84365D23D9F280A0745BC700274EFE0855FE4DB676E1DFEC91615CB2738840EAD4C7AAE428059D7717DB2DFC6650C8E8C3ED1E9EDE0A5D10EE82596916C1387E74918F9A713B38B05D90055E84372ED99FB5A2345FD9C19C9FF535F64&h=B60AE9E923866AE92E64B75BCA713E0BA371E64BD8EF7DD5453F8108A6B9C8B1&directdownload=1&f=3346939&d=http://.../windows-password-recovery.exe

http://gsf-cf.softonic.com/27f/185/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3346939&instance=softonic_en&type=PROGRAM&Expires=1442252040&Signature=D6g~V-LEtkd8Bt9P0VIvrd4oM4bRS9I-ZJsY5Eh6-EUBhxW43R--7FUJNOBI21N3GTFXXyGG8QRbYcSGRK4aY9Oodu6OUmLKIU51eIlmrIklnVsAA-X1UMC-49P8hu7OTw-nBbTKp~u7Qyj2x5Ue0mH~-B2PHbWSgZIwzDXOxs8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=24-10-2012-windows-password-recovery.exe

http://gsf-cf.softonic.com/27f/185/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3346939&instance=softonic_en&type=PROGRAM&Expires=1434500059&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fwC-ho~XgiOLJFfQiARBCTf5ftyzVQvR81iWzD2pRf~62BK4n9hOfJggeyLYRHykwdyshvNHTIWKpaQvicnLFKspLgAyTrvFPy-5vslI3mD7jWlWGRSQ5tXbitqpbVmXnE2XZ1LqQKUicAxkXLArqIb2JbK3OcmNjXCjBHVMYug_&filename=24-10-2012-windows-password-recovery.exe

http://gsf-cf.softonic.com/27f/185/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3346939&instance=softonic_en&type=PROGRAM&Expires=1469963509&Signature=XtM0ImKUji6N5WaPj3WaSlgN~e34E2ZSVTfOsFZkO2QEx0xDXihn9uB~2Xio9Oa8tcwoSL0dmcfccqMNx~gY6x7AMBuV87O4Qsm7IFEO~yr4vdriNEqaFzPYdTUV1znTk-M~iXVYLC2wu5w6wS8ViLG-6qAL3saZgKll~lItWfU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=24-10-2012-windows-password-recovery.exe

http://gsf-cf.softonic.com/27f/185/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3346939&instance=softonic_en&type=PROGRAM&Expires=1435045156&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XDunqf6QtU3HTHr6aRyBWeeDxxxgU1yulFH-j-a~Ucox5Wr2346F-AZCDA5ivBraCYOJjWKSvvmLQ9pzfuXrWFYrriN62kJpkVemd37nM1Hv-QjGaM8jZwBc56cQNYGse3qyH4iVbDqNBDBFin27K1n~4ll475AsCLwvFxwBWuI_&filename=24-10-2012-windows-password-recovery.exe

http://gsf-cf.softonic.com/27f/185/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3346939&instance=softonic_en&type=PROGRAM&Expires=1475973090&Signature=gCPo3FrMu1zZU-lZfLA2JOKSvxoHIVJp3TrY1LHp4rIwBZPYI6jLX7o5mjpZH-9DOtEX-rWIE1o8Kpqbv2gTmdv1XpjPELLeZi3dIpX9o5lKnL3ohFWfjfIQAch6KgRgXORXnYCL-95M-KzQGPS6mEdnEHSkefM9D4twOHi~Vfc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=24-10-2012-windows-password-recovery.exe

http://www.lo4d.com/get-file/windows-password-recovery/.../

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=28d616141448bd2b5d1710afc296f0bf&upv=4b9ffe1b7a0045ea520ab4a1be5d3481&z=download-cpd&sk=576&abp=0&params=F39B2A32BFC101987B1458170C278E03C04C00EB1B518730AEF2A76D81F9E0163806513FA9C0D5987E13D5CE184555C9C63406CC3A184C2848DD0F9065C123AA51AFEE2409A63D1F6FE9C24354920AE61A5DF11055A6CFE44DCCAF11AAAD81F8236C03CB84278C3E4F42ED7B5A23AC2D91E1C8CBEA5F6B5865E215061FFF229F680436480770B1D852D8B8CA6BE2331C53E03CC32584831A3758234DCFB43CFD&h=E117191CD31BA68435EDF1291319B4F8075BE4B52FE39F6C0010FCE812FF16C0&directdownload=1&f=3346939&d=http://.../windows-password-recovery.exe

http://gsf-cf.softonic.com/27f/185/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3346939&instance=softonic_en&type=PROGRAM&Expires=1463181958&Signature=QEIvOJIlQ6pHCeGe879dFy-mfWYBJnoTntrMoIow5cKHNyKDLnb2sKGGjEugJxWgsunKMIkz8dZptjdp835UvRnl6SSceXxwsDvtQrwxlPHEu3XnUB0kGuNX3wBfBZoxxbjvr2qWYy6J8SJkoo8jnnkN1orYA~VP~qX2oWuK8VM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=24-10-2012-windows-password-recovery.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=b8c7c346824d38ab956299afb736f763&upv=31e86b7bf947cc817427b0d94035d67d&z=download-cpd&sk=1399&abp=0&params=F39B2A32BFC101987B1458170C278E03C04C00EB1B518730AEF2A76D81F9E0163806513FA9C0D5987E13D5CE184555C9C63406CC3A184C2848DD0F9065C123AA51AFEE2409A63D1F6FE9C24354920AE6A78FB93C903560E7526C602200AAA95020669FAAE392D330B9EE8B28CD85DFBC1343B591A8296CCCE16F45E6D6C344E48FF59C19334CC7A78ABF2C6AF6CA535F4C99B91900A280F99EDE80A072D2BC0A&h=A783B15ECDF3DE8B70C3AC923A8B793421225B0B9CBAC3585B3247CDDEBD3757&directdownload=1&f=3346939&d=http://.../windows-password-recovery.exe

http://iaidsoft-windows-password-recovery.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPfKtnB1uXSupsCcTiN8syf7rYPShcHHE/.../ C4W2ReAHGI37vvdY3mKpI6Qjw0gNwbJ5a9xXIaOq92QHhyW9jJarL3zPfhkBQvUnB1swt1yQ2v54otGzbE=

Latest 30 of 30 download URLs

Scan 24-10-2012-windows-password-recovery.exe - Powered by Reason Core Security