alienshooter_trial.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
dc238166beaa0c80d8b2efdbae07b63f

SHA-1:
d36f4cd188534577931f6877c7e0c1f45db33b01

SHA-256:
32def757790ac8a5fc763101d4f720ac0a2e7d7aae4e4b9a7c5565ddd9654356

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/25/2024 6:08:37 PM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
W32.Sality
2.1.4+

Rising Antivirus
PE:Malware.Almanahe!6.14E8
23.00.65.15420

File size:
5.8 MB (6,121,696 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\alienshooter_trial.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:xYrbCug+eYwGvunCA9/b6aY20oYXB3brM6TQHO0YPqgJHm10AYteK4tZajpChUHh:mnvwGvf4N0xHMTuLreKyZ4CfKwLG

Entry address:
0x3DD30

Entry point:
60, BE, 00, 90, 42, 00, 8D, BE, 00, 80, FD, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Entropy:
7.9986

Packer / compiler:
UPX 2.90LZMA

Code size:
84 KB (86,016 bytes)

The file alienshooter_trial.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1487741454&Signature=U~Lzzv13RHmrhEEWlUjyH1aegnYT6ESWb5avXCPJ5SQfIMSCJfY7872LsTmSIZMCRr9u~PmnkwFGHZYNa5Dg3px8gHEYZPXnOsURC8d452BvqTKTyrN-O0Wj1bN~rNwQw-hEDFLgsYkxOr7qCc~S9eBeSkh8QSLakpHzyQNMG2s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1482113237&Signature=d8JZXCa44Hba02mR-KA-Vuwt-Eoq5vG6MXGkmkAUk850O4PKSORmPgrIX2y1WMGbjBiQ5YowlhDlSTmNVwpusUs3bSm2vYYtkvpO7NHc1kVaNsbn-X619VskLMFptC4nnJgY~~4jdHLkoxBXaW0FoOyOWnaqWn5Yh7Tav8EnRkQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1487067256&Signature=BVZkEnuNaUK0uRpXD2q1RSD1kXWJN~hvDGpbcM1YDMaCRTrYLnwT6fdrT6T2HN~Bh0Q71AczJf1muKOZCWNTHgqdn-KXK5zp6cERo6MOXd5yPbzTNp292DDYtE0mg-9nbKsvVFzfV6J8GtaOXgdru1fBvifL6NerIn7oX0AJLiY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1470444227&Signature=RSHgZGc5VIejKf3wa0QwYM6bCP2MPDaKC2MHWHwhAlqIDJY4KVt7-~EwR7HP~op~Auwx2n-0M2uKnBUkck6dJBs9TOhCI-fJWYlTDmcQ9JI7ddMrLT6lKqbUdP~TOGsZ0SqF~rV~koRBFqGGbVVsEHXvLxB0yqY38y3B2Xl0Gqw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1473997631&Signature=WRt6ueJwvG2SWVL5Sm8gO1LSjPtwPQ786dGZN4gO9-A7-DonqdqOMFmdUxc-4Il~npP4fdLVaBfYkNEPhQ86203Er422mKIwAteb8kTYfTVUZ006mnlzLLsvYeJ6tmGc08OMEngMFbgQoB6ZdfVq6445OyIAXq0Dlg07E2rLOss_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1480450878&Signature=bTbQsl6yTqekSKFfeZUL6aafsB91aFIMOdyyjfEyByavbxtBDA910AEtcThkkEnykjTY2du9Ag1XBWcnTuh4oSx9lCHx2dik8D1CZ4kq9CRSp3Zu5lff5KgZixjA~T84VCYhymmgZlNoymx5S2gnB5L9zFV-N34olsyiPm2r~LE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_fr&type=PROGRAM&Expires=1475528920&Signature=czhTvQ-imJX4Z7wTNUGGatRayARiHISUGFWGgI~rPgVbM-~bDxVXICQIsXPgiUZsDOjT7ZRfk7~KaPcFEiuJLfAaRM22Vb8LZ42vXdX-JoUZHDFR7MF1d73s8zhg41BYMVnDLQM~vXRXhoGsh1s~wix1HdF4uvQhIrb6bkD7MJ0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_fr&type=PROGRAM&Expires=1482705184&Signature=RzgM64-fuTf9Y7dl7onbvVsNNHDXcn4J8x4b7h7AYoTQmtHLurUTnvYoKzQmhIHpUl9b2964-OGF7uweg7zfytVFo~QH3qoRTAyajPEhNUhM7bHXhpuFEUniDyT8KlPAZPx-R~Y0MDpIqaHBqUOm1u0ZML2795TKEK44mCBlzwU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1483670852&Signature=SUxRaoTVEitCAWul11piBvGRRjkvoSTOrLttL-isVzvmy1h9zC07aBvp2EWtsi59qoX5aGAF~tgT9CsNpwIHWWhqKpCiaBMn-IhdZxEi5gTHHBBntfea0TDj1sLdLTUDSjGQXSJmZ8DOv-6zjDerOUPQ9~rdYLmyp0GbOJFOl6Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://cdn03.rada.vn/Data/Soft/2013/08/.../alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1475168291&Signature=NidLxCzVJicZWzIFyrDmBMhpKcz~i2iiOtkBwUixLL6RE-tnuk6BRcnPQP3mIvVbMROhBg7eSRWjHo2~J6Dv2OOqZJ5~veU9kKp~wzWGO60O91WPYPZZPIzMBmGw75UYaNKTTj2ZcNatLc1Qd4vOy4cdEY5qvhhAI0HH~o7dFLY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1477855530&Signature=Cuia7Sa~eNSCjzpFokfrWE6C3B~ept-iuRpR9UAYpTQrXuyYwqMwXmwBcA6JtdP4zFK8PdnVAClSx1QHXWBtYPuK2M4ER9UU0NEvaqwF2GxFAw6aHXZ7~Ktg7k~UFlSF9woBkHKc0~qgsBuw6BhJ8HSRo3B1WnhzN7KktRMxSSI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1479687156&Signature=YMHOVn6RHqfeMVonc9fRRXtGfFRZkk1xranWOTWz1CTaqgUXKsoVjyuyjP9IKpYXgo4dW8d-5rjlGMj~hTYDekC490x-WMITtIbsPZVwPrvhGZnZaaQrAPgXXU~TU1SHotX7ppaeH7ZhC4jpqZcxBT3qp7rdidV31Hh-RB1UjYU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1470720119&Signature=AkHIzoAyTALy7v3dxQb-hOtrS9km7RiwCnz8ZKKQ0UpTgS5lOzkHiSDfzs32uM~xzt0kAka-NTtS10-kW51cohm1bLb-jZhyD0SNrJhL~E0-2eKwlERc2tRTZK-Ijat6DkW3HZVElyCFimFIEbSlbFsrwG3rqlCOHXTxf0iY7CU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1478196945&Signature=ifroFfilUat9NiQT8AsJh2TzT0e8pXZ8EhGJDYzUnhwXm~gmjFTT42o2Qdi2HcdkSjfiij~H2zogf3M2rj2sAaC~nBwh9KEYnCDDT1XsXw7SFFPpsUgFUhD-EoXjLIGNyJTB7GjQ7LsNo2L9L~A4xwBQMjedePLXZdfSBKYjfbw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1464441204&Signature=J7U45w3sVuR~SR~Ik9QH6vIy2EvZZyWnRsys7QCGDsUMW7oFR9Zm5yLhXC628fbEX1Fk6IpOtDf9WE0yCXT2K2Fx7yjvvXbEIuO0gs-At-2JdMMa22pDUOX8E1N5~MuZ~pko4ZvSPxLGwKy0G44FJ8r-McXP0SzghY6PFCZJU8k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1476513149&Signature=GNeGm4gCJBYVn~GTGz575Tu9pxRbXgFIltL7bfyuuXCRYnjR2LOKmNfqfHzL6R3pNF6Lf2zzSs7JaT8K5EuseNw9p1iiS1MHOgUMm-sVi3-HjTKjt28FundR29sfWwIs6~L~xbCUZhFRp6DB8fReftT8cfCLcFzduappSB1Z9Mk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1476255783&Signature=ejwuMMZ3j~drXq-uXO4nAYv4QA3yNZL~jjEDLg2tV1Lhv~7tjsua9nTAapi-0JAW0wBcS8Qbl-Dt7iI~qpuOb-1cTTjyyrTNnit8C7foVqpr6btX3vhos-HRZOgmno6NNxCXlbDWK-njxmn8oToy7kFK~67HzsX9VbyXLseav-4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1476423215&Signature=b3usVOA~ItKpqq-w3fmDuMpEOCAjl03~uK-TpPtyu4d8nSCKrbrNrragNsOU~zynjkUlU2vO6AyMh3m7pQy7Jv6mL79j1rgSWUtqQ0Epuo6NzCQL4dG~mqWEaDi5S7GJpbQHxM8WG1-h3WnAK1UlqcUu3BL8RoMdKfgC0SP9fVE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1481102596&Signature=CJtlKVwto4~n2zjub8NB7GyvglJ6BVwMB2PkgDdIy5bqjL6EGhdE6TuawwTup-1rq3ne1fqspdXTfY60GolORIxyiSGBamSsGMyKV42XQZ9HF5EgRXqB19OoScU4x9lih2rQI6IMWshr7~uVC09WiTY8dPKEAFi5WI0bhFqhPFk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_en&type=PROGRAM&Expires=1476465803&Signature=KlrwKSjlMgEMQXBQ9P~p6ko1FavTW4TFoAs9FKcTXFQMhWBUaHCQTeNr2sktS2fjaRzuHqour7CnViPm7vic1xOwcT2VpJRQoXzvBZGZbrITQY3elDJR2l9uB8uFikst-BvkvAu-D-xJrtOUg0BR~0on5txWLDd0pBHFdMX6a-g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1477415145&Signature=YHNVmHraTzylIOffa0iEIvTUasWKmTTWTS6D0IsebVj0XP28HPUHQZh2mUDRKUWvzSrJ3rzjoREomc9O5ryRSpN4T7b2lbm~q9FGFApTBLAfS1JlD7HjRKr9w6LZCzAnpzGEjF6EVleC2p9BpA-eQiWJLjzlE7TRmfPjjU~Pg0I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

http://gsf-cf.softonic.com/d36/f4c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29194&instance=softonic_es&type=PROGRAM&Expires=1454726544&Signature=QTRNNKTG1odCKIGNVvjW~V1-2AuBck~YEyTRGatVCRMGLJR0pIgUNVTP1e3owoklls-3r4LoksDh3oRsUOH2FB9rElyD1Zrx7VkCRs3F2rkC00gtSV-tGffVlBpdQp3dFBUljMttRyQuSRho6Z9PgZcE6uliaiSbXfz82vtul3s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=alienshooter_trial.exe

Latest 30 of 50 download URLs

Scan alienshooter_trial.exe - Powered by Reason Core Security