adfender_1.80_setup.exe

AdFender

AdFender, Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
AdFender, Inc.  (signed and verified)

Product:
AdFender

Description:
AdFender Installer Module

Version:
1.8.0.0

MD5:
a8f1d4ee12e3fe82b6f31367ebe09bd0

SHA-1:
6e1971682dca2ae1ac3f3857f96be6d940b41153

SHA-256:
bdc0f149d0d904aecb1a04606cfb70d570dc5d2a2ecfaf7952dfc7d718d6b21f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 5:16:34 AM UTC  (today)

File size:
2.6 MB (2,724,784 bytes)

Copyright:
© 2010-2013 AdFender Inc. All rights reserved.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\adfender_1.80_setup.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
4/8/2013 9:00:00 PM

Valid to:
4/9/2014 8:59:59 PM

Subject:
CN="AdFender, Inc.", O="AdFender, Inc.", STREET=1600 PROVIDENCE HWY, L=WALPOLE, S=MA, PostalCode=02081, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
178B45AE9053B080E4C517F9962FC8BF

File PE Metadata
Compilation timestamp:
12/5/2009 7:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:2HfkyGlhsSbHiuKKhpqCNgfGPB7vj9yFnbXvrw2UqR6w0Q+AK+B:Dy4sSTN8C1tAxw2jXe8

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file adfender_1.80_setup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1465281179&Signature=HoB~~qZANTH3R35o4JkOSeiHaDiYxYVPE3K6FTmxfQvN2zKMBy6zCgzl6-wx4l~M6qAu8Z9NzmA~yZSEI9XjmiHxhIzXD5~IOaoLl~ia34qmvmwdmYt7rRY1tHi-Dx8dqQ~Uo-fFeBMaH-cDtKFdP1kvLcVvrk8UflPnWBLUWnM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://default-page.com/real?pid=3022&distid=3509&clickid=Z1dXVpZD03ZjkxNTRmNC1iM2FlLTQwODAtYjkxMi1lMWNmNTU0Yjk1NmQ

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1483668026&Signature=bGFoNuo0HuTo4pWigavpb5P3O4DqFcWtgbjAdSno2hStuwSHUGGXajbQKGlb~jRK3JG91Cf11CJC7lfTXCqmbF9krOAbR5okq9--DWFBdkOGK3ekxSlziKjDmwdncWYWlz9XLmV3hbYYplLUDhW1smyL7P~NkHZzUzNwWlQ7Q9w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1421678038&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=DGW0L2mGQHvfac-o957aKbRn1mwoIXZ12GYUud0tXPty4aEe-gx6UfOog8canfm7ZQJgbcFZ~qBw~d~Xzo0CJtjwnwU5t86Tg2ll-Oj7SvG0Y0t65JebND~EJJuht9lKVMdPFJzsAB8zEn~5OxKnWu0W7IZeB8UWv~p57g2PyIk_&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1424061163&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OxX9wT2Jr7d0sEPrfIZpdWCC451aXxXn8JN4QO9SxIfROUjk757AX~-V2ywo4kv8NhwW2IQKoYsQPG4FctnpzeuVAFviRBxDHaMLOtvR0Txef4WCnTL056AI0JuHrD6QiNqS3AN5WZVHLrCvHazHeYs4PTrNimIaedMNN0lcrlI_&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1440229774&Signature=XDBlc6aWgK7g~mUW2Gu6qpyEi0wSQvD063jWJ8qka1bDZbXDw2x2sxssCde6-zd5uLcpxlY4J7lGmTAqpyeLderDrF6ojZRh9f267JnOGDKE~Oi0KPonU6VfCJ8aYzRtgevb-wIrKNg042KlfYb-xnaIMQxp7Z0cvBBAAGa3FFY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1477007000&Signature=YT6jT7CtahQeTlg1UjXpa9GfA5YR9RznIJkbyQdqFuyKGFIoBcJ9oTWPmNto6dyqQ-8mBNjaNwKtijt7RCO~W2fQAtst~mQP7pTYcxfSRGmNJRw1MsXCjXdF0Vsq7sNLblEl7az09rqnCoczKmfcs-dlFWorbPDewBStWu8Ww4c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1482571083&Signature=c1DRMLjoDqD6QZbct5I6uFLK41j3I0gUUEbZ11Q4xpqat9SMHKXDjaYNiSiKOpk4BaaLXskRkfnQh3nllb9SWXemwFGTUP1X3jZuIsnua-h3vLBfk538rrM30az2aRFptcJaIdnbEvYmV8aoAHkQAUXXg9QqPCYzNiWpvfQ9tTs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://software-files-a.cnet.com/s/software/13/50/53/.../Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1443344907&Signature=KEOYazukbHTN~YhqXaDQkPb21fSwHQ~yHn-NH6dUY6BRYsgDmyczWX4YD8WpsrWlJ4~4Pu7GzBjiI5PDJEJeqpo80SEjflLETgHWdMW5LdsPlCNW7xKZbIQB98aqoGHm1xfanW9psOT6loqNmEr~dXJpOskr~m-RslucnM4Osv0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1478391179&Signature=LOKcWt7XN6KM427ozGEzK8vRx7QVaCjWso8PmMCOzDdZB~JZnHf4TR2~jTVQzK8jXap-vkqq-DF7ITjKXQcEzh7bByt8alfl3zFWQfULiCAgr6Zwyl0MiRl2dFKDrsoiWTnQnQ8OTr22M11Z2XrmurTgKMZJs-cVYMxaVxVfGCg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1478243519&Signature=L7dPViUUxm1egh893VdsPMrR~XIdl3rUfeZp~E3PObHWgSHsQz5ixOx13PEGleaNPwkfW1eM1NCSmrtNJr63EcF-XDTxLS8earo~dlyxmxmcM11Z61kfIa3sotwPBBE6JrQ3-3smz58BCPGZOLhDMaGSpFvVWOLoVViewhDd-aQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1476752254&Signature=dj7VQadhFYDdGbAFRoZqJuQa6WpR~R~hNS7GJTMvLYpi-mfBSv~YvsNfG9I1ZLNSZurMXnySHHajoEl6cxJz6vTQN3qwFZRvqh~Wt0eYspgK11w66l8brNDwsMZz~UE1cgf3asriH32XgERilEjr9AYrbqaMAQzZr9n~ybmWQ6o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1425942307&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=R04A3Oxwbr12A2E~nuo~eu0hagT-OuRqfxf5imoMBLVB6zMvpfNwZqNAAQTfslhAYTqkIUPVhuzWi-3-3Yp~gcLJmSAE1heAKlKLzTjZflB-NYBnSkoeFe~vXyavjH5STMD~et5poUf7cJFV8NHutZTyJfmAU4F4HJZapXfNGMI_&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1440570639&Signature=Ie33jxXP8Ih9FW~L12tA3GqgeRUNpTm8XSSg2qO~Wlsgd07Qj-yUn~SMRGh1c8JcteUzcnaUIooe35XLkoZfXbite~ytoc5uDIbV0-lJIwhympkwhtReDsQZuGgj39ZvoTf-6VxqqeFdxPH5JrSyiF-mkitK2s1Z858AWmOMj6I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1421552555&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OvfXpUOsYCPPsMIPA3oF5Tovin4trOv9uwP5LHeNir6oo6Ra~PKRIZGWXDbIgGg9yRn~wnA1rzNmRfGO2t1SMgCH942pH9NJguYFpVtroEL1wkYIEj6gWQ2L1TFUPwskHOowMOtmcSowx63QmhQm0t8VM5WUgOGf5U3K-1JILPc_&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1476415778&Signature=Y10cZ9F6SbrZEdK-DNU6gfYCYrIsKzbcLhzwY65OKWLiIXYWR~vHcD9qehU6D5ZNwGUion5bqF-gPn6OFAUpr5-wX1g60LKWjTf20eoZ6b8E3Kumh0xowe2wzIJNz1zT5IvJr9mEyDhXWlv1gATLNToPKzKElP1TZD5kujJeCt0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1449373302&Signature=dSTu7NJU2PSNmT5DMm3cgmmI0VvB4HqPTPYbLpbkRAp16am33HlvM7DhdIgclZBoPLWn9w5M8bAVf-0GuD9592-1ey32Cx9uGZjZpH8TnztCDB~tBaeEfux4JV8Z7nZTmZ0sAGpJRAP5D0u-Sb1NLHGzeThty-Cw4bQ8Ht3u8v0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1421636236&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MWlyu3fer3SC-7C5IpdWHgxQqAFv4~oJ4fOFpTYVV0JiWRx5N7fEWN1u3dPOq0nYJ-lkSVc7agQRr-oj7eDtaUNlgi1QdI2qeWBsKUrI-PMZ3g5sfSq59MAkgjNjMBsVF-WH2y3Z8Y2wa56b7l-gj7wnm~Nbyry0153cUKG7TTs_&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1456643802&Signature=duDmCfvAcF2G2iQlltA0GriJEAcr8o0E1As0-mlqHasJamuZcT6BJRrM0wRNYVGTeleNOOfJWRDL1U4CzoijeQ8WZlyZjzCcBFnQowLHPrtsEZyU7h8Try8FYVmPCc3j30kHne36wJmAi0NvshFqae-vQGt8hQAEwCAaoFeWP7w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1461060030&Signature=R-~pSX~K9tpokS-cxy16AmOmzGmJK0YN6FjXzRZa5doaWSNYcxvCFznH3G6kn2qPeetebDjxb7ZJp~oY-0R4FaA4H0CYM5ES88sb-TM0SSoHIfxNeE2KeQ7iZfOBseOCVJ1DHPaHw1eaMcdM3xLXKbHhYGgPVTzSpRQISsAfBEo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1428124785&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UYZy7ZE7qOisYNPcvYk95ciHyh6qVeORcz6zz6ylYlhOGAK65Rrom~v78kgiRedZJQhtX4qQcpavB5GEqV0rMqRcT6aZ6WCUVgP-SSM8E5Gw20QutJlqCrCHm0aEN0ZC9rtr-LOzdQd21M2Yf-aLJM05jWr1uoZA~XpnALQimbM_&filename=Setup.exe

Latest 30 of 61 download URLs

Scan adfender_1.80_setup.exe - Powered by Reason Core Security