home

axelerator-setup.exe

Axelerator

Prospera Software, Inc.

The application axelerator-setup.exe by Prospera Software has been detected as a potentially unwanted program by 5 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from aresgalaxyonline.s3.amazonaws.com.
Publisher:
AresGalaxyOnline LLC  (signed by Prospera Software, Inc.)

Product:
Axelerator

Version:
3.1.0.0

MD5:
dbaa0bb1ad5e43daea363bcc621c7e3f

SHA-1:
68a21dd02a5d3e46d707b360f94bc5791287e6c6

SHA-256:
612cf50e1c4c65dd05127b2803e21fbe3b76e018c2ca24b58048b6659d949d3e

Scanner detections:
5 / 68

Status:
Potentially unwanted

Analysis date:
6/25/2026 11:01:33 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.2954

Bkav FE
W32.HfsAdware
1.3.0.7237

Dr.Web
Program.Unwanted.538
9.0.1.0290

Reason Heuristics
PUP.ProsperaSoftware.Installer (M)
15.10.17.11

VIPRE Antivirus
ProsperaSoftware
44506

File size:
791.2 KB (810,200 bytes)

Copyright:
� AresGalaxyOnline LLC

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\axelerator-setup.exe

Digital Signature
Signed by:
Prospera Software, Inc.

Authority:
COMODO CA Limited

Valid from:
5/24/2015 8:00:00 PM

Valid to:
5/24/2016 7:59:59 PM

Subject:
CN="Prospera Software, Inc.", O="Prospera Software, Inc.", POBox=30024, STREET=4539 Arbor Crest Place, L=Suwanee, S=Georgia, PostalCode=30024, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
19A1AE80173FC78EF95D67C4BB75F591

File PE Metadata
Compilation timestamp:
2/24/2012 2:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:zpM6st/MRbfT/T+u4JOr1QTuXVZ/xcUPfLxPjNK:MOJT/T2JySTuX3/xPlPjNK

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.9158

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file axelerator-setup.exe has been seen being distributed by the following URL.

http://aresgalaxyonline.s3.amazonaws.com/axelerator-setup.exe

Remove axelerator-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.