cursorxp_free.exe

Stardock CursorXP

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Product:
Stardock CursorXP

Description:
CursorXP

Version:
1, 2, 0, 0

MD5:
4e20300482179b0c47c1f9b072679d1b

SHA-1:
f13677aa04f0fe08fba674685fcd9e5aa2c85b8b

SHA-256:
f7f5f37828bc48098842aaf1f8e31aff5d8561e8f35f9f54c00ca9a4f10e3589

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/18/2024 11:46:52 AM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Trojan.Win32.Buzus
t3scan.1.6.1.0

File size:
2.3 MB (2,383,872 bytes)

Product version:
1, 2, 0, 0

Copyright:
Copyright © 2001-2005 Alberto Riccio, Copyright © 2001-2005 Stardock.net, Inc.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
1/19/2005 4:42:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:IeN8fhlUASEOQ1dG1Tv6/49slzUsciDzwv+X6iA01w4iafep2gObUTvrY:jN8XRSEOQvG1Ti9ZTNzXX6ijfepOM

Entry address:
0x33FE

Entry point:
6A, 60, 68, 48, 90, 40, 00, E8, DE, 0E, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, CA, 1E, 00, 00, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 5C, 80, 40, 00, 8B, 4E, 10, 89, 0D, 9C, C6, 40, 00, 8B, 46, 04, A3, A8, C6, 40, 00, 8B, 56, 08, 89, 15, AC, C6, 40, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, A0, C6, 40, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, A0, C6, 40, 00, C1, E0, 08, 03, C2, A3, A4, C6, 40, 00, 33, F6, 56, 8B, 3D, 38, 81, 40, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
28 KB (28,672 bytes)

The file cursorxp_free.exe has been seen being distributed by the following 37 URLs.

http://dw.uptodown.com/dwn/b-IqsdLqjmVGkncwMB8-dPO2r1BtW1nX7HPIkUaTnak5oCsyQePxJhQwXb6foA2PSDlYISGTxTu27u6ex3J4XEgq1lM8eS9iLgUtEEXXWQ2H8kyStpBMz-cS4TTi9m7D/Fu4DsAPhjRquFmrtgexYykzcI635Xc0MAjHvlnx60dQlJk2SkjbU2J0CHfXwnCNrxWfvOSGxyDlXfj12wnvz5gfU9YZKSdWvJGgXASoF7EZF14xelD_TzqucdR0d9MS9/.../

https://dw.uptodown.com/dwn/8z-X4ZVebUUPClAZyXrHetXwI8En4U1h6GomwEagxC2UcJ-em5l-FmupS-AW1TJiDopwsriXI8p6TFPXaGy5bcbEZYFEAf7HUGyOpt6V_cDweTtngLD6h2sCNxAmyf87/9_fewf6o7dW86YOSJb4jh8sORutdmMqhMmjWHip7yuFWQ_HKQEO7w5Q9woS6lZyMC4y1F58HXybN_nIg3rFNUZ69qqQuhmZnXZiyfdwhbijm-1m8uDHemkUYfux3ClsH/b7O9YABfNcldMXVoMEFq3tujtGuXO-aEfFRt3_nzlgC3uledPvUHIcLLno-GGjxt8_Ucz9eWDbexq4dl1VAfuGjTUqDU-hL3ots1WwQfc9rmk5BklJjdrvFJFlEpOxv5/.../

http://dw.uptodown.com/dwn/B4K27wvmk7W9dubiJctEwe98LkCSz7h55O2qUKFQiP23geRhpmP8DOtzVlccInYRzI0b3tx0tBnD_nl5-rurbyENgcoPrU1P0wmzsAUORD4c-ZlT2B0i5u9-7g0erZx5/5_BOIx_i28UcWaiyDLhz3k6xFtTZ8ZgHez9TUgpG5-vOZ0stBie-6k2WaWYTalDnG2BsLJAPe4e1o9xSvS7SZ7PE1c3Ed5vNYreiBr3jphMk68qURI-gimh_9Ca8dfS9/.../

http://gsf-cf.softonic.com/f13/677/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30773&instance=softonic_en&type=PROGRAM&Expires=1472173189&Signature=NPtMAq3to7GOYYoMC3ezA7PYUAFrDeYlkQR-ztbEJ7-rGprtUuOFsrcmh65KfPkqruYp~aylbPzmln8al5LCs~HPIqnX5bdpKM3YpnB9IvnXIcne5WXK-kfHJA1llg91ivr~jmFwxZqpfI6Cb5SLl2hvw9Ngmv-gfUpUpfRaqyg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cursorxp_free.exe

https://dw.uptodown.com/dwn/v8nNEhkEHG1VaM8Uo43GivLOISCVvzJC3cO9PvlOLaT2zKM7d7eVmcwht4X-nr4uOkQy_Anap32EmTDjG9bSCLA3YC9hqFJlDD-7N27wCq84C5b8_9zPuTvxq_PW70An/xVgqd7Vrx5PzQ9mt0b6pDDGkDPfZ7XhLnyPyfYfCz-JIq9QOvm1SO-nEQFYyO09e5zmTNgYkfdsj_raU2wDdyBcdAAOz3wqbXVU9FrGXjT2kheswXA-k76Cs51k_wLCq/85NdAnv1r9ffHnaYZsLRu4eimiAFVVOcYNubIHa6cfDbYQjVmAGlp8p9_PMxX9oDL3CMz7wEBBHg8iw4WSzndchQhwTtvuJJ3JXoTQHqXCD_YyMD5QXdeU4j52VcAe8H/.../

http://dw.uptodown.com/dwn/lO-MWGfjUfenjcl_QZ67P2gHNBvhHjqAfNE2UMITQ9amBfwuaRggKjuNecjtqUiMCnSGQCa4DCK-aC8RN_M6r6ONWHaETBXlZ_9FZSXqjm7J7eLfrtY0nZt7_Aeb5vyH/bYJGa6Li2zWIEQ3Y8OCM8BFm74AP9CqqkIpmTIKUWRfRXs1xYfKnLDwxgQY8-Or8C7gOE4eGyqDL_0lR3TgCRm6gNXxzaWUcDJhcSuijWhyPSuU2H0KM8QIOpeXvJkxj/jWPLC9c8ol967L4_uXsMeinvBGtXYebSq9c4aEll5VB8xZY0nRBcmf5RyT1pwEfqR5BvWvqIQcOw9k4vZEYonyjIH07eZ6d2GqThccd0y9ZwkPQp6GLB1wmazTNdv8H1/.../

https://dw.uptodown.com/dwn/4sDgncO4ZHlQUJoHJDueqeKtewUbsn-xvHAeEal_zAzWoXDNaRYCRVd8E91mLKZ0lk7c3kLf6EbAZXWIBlUu0u4d0sYFHDwejeGkHEkYfR6ho7mfGAEZQuJpRzfl27Mh/PURI7vyMpjOFflQ7G1PGbkZbmTDfIrQfw38_P4TjNd72heD0D_VvHlQlAVApoyJLfW_uXnOLnaV1HLT1lCds3gMiEnqCZOOlMycFAkpqTGHdMC4Dd4uJ7x7j7vF_cZbR/SLxmd4Cg9a1IMv1NXt1-kOMqRD7xZMZlLV-2uczh2jojfeWoFRga22pdHZogIxbWq82euvsmNecQ7ApD5W9BWY0e7x0DChX_F5zW7oLhP6MeC169D2P3DW1_iqCZi53-/.../

http://dw.uptodown.com/dwn/2CsKTx1GjpkI4cTkScQAg7qfukdib-g4M0m3SYHxKV_2197iYjzMPUwk1N6o6z3juYEv4keAlRJR_k2nYUD3UkJE5PTr5q4iK4LUsCwTwlzqxkA3HjcXV6N3ZymT8L5P/XWTym922qO2FwLBVY0Drov95N4mJobjPvS-atdiVpkZNEaK3P8ku2W-ZDsQK-b9AFQ_wFL5NyhJf32DRYWlpaJBAd14R0n1NRjy0BYRt0jH2YCST7AEPH0AuG_x5d9Mu/n9GfDDY2f3_U4qLxd_ehXVsh96noNEqx8seR5Q7MdrmHF8zp2gqyfr27SDuafGEq2NYxys8oQj89tQFEg71TKa8mOSPR6YV5OR-2WfwdqDGwOXDS7kmS4TPUHPkyr3K5/.../

http://dw.uptodown.com/dwn/o5UsnqNzhiq66SAqzB9QUnKgSiSFKUNtDOW33A7MuzG6aU-u37eqLGJiVxnzk4C3wpVDuQJ_cguKxSg7yrfmwwtGLwO6nvrEnz5-aNjn6jYCZ44Hb-AAGfnrznEyDw_y/YeqqOcFDtf3gzq8lqWNFGkfYb-mDf9A6aRWVHehmbyRMQUT5DMmJj-02yjDBTV9ZHFsAA5zdek8_fmtYpO3dIu2TO9bFzfk_WoAXdu8ulSgxBmc-7FPvENN2tBnuPkHx/TS_0g2mF1nTQAzxPL_J9eBRzUlEjTiJfhmOepV1N6c0mita7jcdIyg-1cDk0SEsN-Cg4Z-z8fBHrVTgNvErMgCDK_WqzmT6nEfhcWgaUzTjJg2S2hoDymsfFHUQ3Zz4f/.../

http://gsf-cf.softonic.com/f13/677/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30773&instance=softonic_en&type=PROGRAM&Expires=1478239895&Signature=cje5mzahD3nottGt39-UVKhCd385NbPXpJLX-FPe1Fg02X4nDLgRzuanYw4J2nKfIbxw74QxTHeoG1XFU2y38n3anYteUHyjw2lJmvY3VRGPjvBuo-2MOOKqdsOBpoSEOZHmGGE~GNBexzq04yHGoVGlS23Qv9kIKUWzCi2ozaI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cursorxp_free.exe

http://dw.uptodown.com/dwn/0O-1NkCr6nTvxPXtTTIrRrz7YIR_eKiGFgrWw6fVKyai-0kp120dT7mIm0L7mHJLJW2io3IzUf7Tek9KAzjxMi2WyE0RYv1pT4aSjYaoSsvXTCV8oqHQ7mseX6gD49E6/klqf1xPA6dSy1o-yb2wTD0abNyx1vgZ_xXZCJjAiHnpwQQXQ7SlYwOw5Xin8HmPseFBvxPupdkld00QDVzT-fqS76q-tfg5e56TlAht4keTh3MnHu47_LQlBgDRBR2Wn/.../

http://gsf-cf.softonic.com/f13/677/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30773&instance=softonic_en&type=PROGRAM&Expires=1453387483&Signature=G2cGOJJFo6w99Dg0BMG9zQxq00NqmVNGnnMC7OMvnRJ1h1UwF6QWEx8fxc8NrekTPWGL815hcxKYL~0KvcU5O8VfLFiWOmQ~64eMoTr97qrcw9dOGpgTe0o0t3XoZfml5zIUUtUtDoCFTgGJklFGF16hwaPs3-LHs92qqqwuXU8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cursorxp_free.exe

http://dw.uptodown.com/dwn/m1kj2jCsbTloX6iMEa6vczshlQ4f1ghhNy33plkOjfq7yREopNgHwNpCzR_00kqwBvi7Ory3AecyiDp-nTpmR8J0o_koP-VTb4oqBXmmXBKjLce_VpDyuDn1a5PnMP1j/l7tc7SQH8SmQQ7canhg96pv66BJQ4SbX_obaRlRDa7WlwCSOBEMRNQso_QgphgsM5zfzNMs8Xpa7itCsyTujtxv9onqWwoyVuDHgiHtBuaR6NP6Zl6MRue8hRsv-CJz8/.../

http://www.bytesendclear.com/f8_sWhMSpVVrO14H24W7C9BiV XNJpFWAr_ TFv_xw5kgtqNCq2nWOf2hs2f7wxLdtvoyQvuNakcSOK5_S7oHgoZlegjJLxYqDgMaMxtCqIGhfmY50UYMAqVrGR5Y0DSFIX0mNDM1jNTdeV2 0t Er1 CT_enlL4khIrJPboLf3zMr8RtlImI7JmbSEoNhp6ibq03R2F8BBDnsuQ5kl9wYY43z_iAviPao0gBZUlX9OpE4vB3rRLr nD1V pkYhIFrcGYsUOZNoCs1KLMQCvquW35pSfGASaDx2MmukZSk4NSjbjAUa0rztZkiOkX4JEtpOO1tFM z hs0pJd5kUkzVvCcxUNLDMtMnQ1zTfhRQsWGcFC1 ssAJ6WGa LW_KyQyBsO9IQV4iV4mDbIEyXUr6v8TO6mRjGTJJlbjt2z gXiM6aIOfLUXulTKoH_dOVJBHjYKbyjoTyKBDPg9de2KtJwAYXm92RvD3_Y9Z62aJ12d2ewpPvpuBYFONGUX7rnQLMAQ16W3_WgO_wCwH6Wmt4BsRrHv1GX7kLhG795LIVLsw_m9CjCxBtWH0GHnJk26pMNUa5eDDgG6rTgNn0grisVkrhw==-G1sAAGS3GZNbCUaLRbCJ6JDhcWMi6B3jwOHW8_GBcOHBQ5YeisQUFdcYjeTsPlCx2hfPLsMe6IdJmeb 62I6xlgHw7Et9tDr5ogNXy0xAboE-E

https://dw2.uptodown.com/dwn/W3rVtY4f5vCnSKWHI8NLoTf_9fjOy6x_p5UQv90E6ZQdHAXZlk8cHUqIqjXuFXvXdPy9DxxOO911CpR8Z3qoASIMbER2q3IugIS0hjfrepS1O_adRLNuW-aukheXOdYN/gF3gcXnk7ybx_P8x7mfHAbTqyWGtKYG9hzJ-TuDqDNrIqY14HctEJSN3t5s_LLHjQbLc-dIR8Tkkh53HgXG-RwsX1SOPvf-4gfxgRnfLRmT3VfmBTEQsbQRznoiLSa_m/DpnYZ0ssn50cXD-VElcyK7ZLOZEvRnOiSIewgl5To9tmkE5kr8FrHKjYHBou3XUTYcjgRWyFTmozABrMnqo8rO6E3r_eX6j0LBPmy0z535ym_RDJDIG3SOsZnkJJPNIc/.../cursorxp_free.exe

https://dw.uptodown.com/dwn/R7XWoZykujKV7uBjIUxVFDL5z_Wyf1hZUYa5nA5qzYBjN_puMX1BfS3Hcn5meg-Jm8PiiM4rjXmkDVtofG0snRpddHZEXyrNttm9TuaoVqpt8ZDm5lmYcC4yIh_4j8dj/pbpDkopospsMknSMRaabKSq6l-qEkKBTyGckyc1XZgo5-59MoLUQoWLeHGOD4zSckuSyXS8B72j8AhXrfyF-apBw5ebFLe0sAnYbO5qNbClF4OxHJX5hxsSEINUnwpcQ/uSX0qE87uRqQRRHr7578v_AcqCaDylYQCo7rb4EwjE-Lr4EcVBK6y9Zx1Tk3ppdTeDUSJ4K1X_pf5knach4Z0Cfb0bVeOOkK90_C3gvHSNDD7wwJhOt3Px3ucMP4W3qv/.../

https://dw.uptodown.com/dwn/-MehkZP-jziwz0hLUHNimrFvqaSVf2QhxmFMSBkyeJScERdershtslbhfV2StP880b5zgRqsH2f4zs1C0dZU3zDxvybcNyUxbI-6flnPk5K97zh5TdP96gZHQBf-5TIO/N-9e6RDJxvAkqLRCC21yk_XVE3lb2wyOdmF3X3-ddCaJcfyf8sniePkIQV6IWsWxkn8GGApXz2c4KD9pyYxdyLJD4-iPd13JjOs5jgHjCX1h0C9zAlqVO9xQFo8aG4sE/g6oRpTQ4DJMcmdzM5GB6GCoiT1DUoNXd2xJGs8Q-2e95ZObKtTco1l6uUCeXY8zKGw6xhaUg6gf_J2D0ZY3QXivPNHqt3T5vAN7foPXdjBIsraay62IOJU_5Qd2cbf4X/.../

https://dw.uptodown.com/dwn/wzX_Jey2f25vnkX9-vF1WZabIKD6xu1Tpc6lM7T-MWeNY7NKrwdhdfB_AT4Z9qnLYi8nBL5gzQSQzz4jzmPnHreCe1hU8OjA1Ud_uDxCkCPDVrdFlwYFoRWJ0UxzGIQN/iEREuc8msEnTH7Rjws1RHwvqa9_cgMXYQqGRPP0PW8J7d9s0S9uMm-smIqztxTSH6TaOcL1Ssc_oDynZ-uf8-huKPNZDEnFdiS-Z8PhdrUpxGL7tNhndMU9iZioHMj-h/JwGYkqTUx-ms3eW3_3b2Q2s4F7LCraQm_XwQP6-KIS37UEiCvohf8sc0ZFWRfaadWImANOqRgaBqRD8VcY6taIJZcQrabLOaxWcc2PTsicKNcxB1Bi3JrUPe2Ok_eGWu/.../

http://dw.uptodown.com/dwn/XidtMnU6hAyIAW4rqXy0rGt1kTJJYAYl2sgK9Sr8hUsycONTNlVNVM5C2CarNh4o_RYDCf_U7qx2Fd0yoiwJXOTpezcepXUeZknSiPUM-t4N4mYVPYSuDt0m-cgWXm9Y/AKRex7vvXHqKhcgex0mXUPiVSLArFLpvxIaHgjcMueAZItuWLHk3YVKw78iUA2zgkW4ma9CY5buZOT4hJIqlLlUOC1WAqWRMSTABhfU52tsmCjHDNZzFvU6xicFq2q-P/PcaTHCwcsYKNGysCx8KUV5j9vCDWfzJQllIo27gYEdcW7EcddhpyLxluDsz2DmPAQLEhLW6qeylk-JBNKJKcU-GRh1d-LYlcvmh7F0Id0ycpbtjJWcahfiDtz95_pQ9E/.../

http://dw.uptodown.com/dwn/ZTccXyMa4RL-ljPp8nc0bv-VUr09hlqV6nwpDGzYJkjBc04zh18h78HkGH5qp9pXRmTuXaohnhaLkXfMxpiVPtaN9bq40UyrMoZvAdd17-VxVF0kq8niPG4hr9zOcU38/oRa21d_94CWJQL01AOFTmCa2lClwc6VFwiBhxk4BipcM9lhboxTm-WL_WFSPTcZ6PefvbY2jBxF0K2mAK2YDZYABshTQfohtmyDSp2TIjKshtJC5c-evKHu0fztch7ZS/.../

https://dw.uptodown.com/dwn/itqrYSiw2mSNwl53Nogx6bGKlaRLQLKFrGz3uoMfm10CyVWGMG_YLb7lulKCdF1vfZKQKeWIJchMAMpme6602KZj4BpfNw8axSqvr8Q7T2X_gyEnoZPA26JzV2w4YotA/tv2i8H89KIg76PipYPRQU_Mh3dZjCSow2Jw8LgV-lNXBntt73mDMpFP4HqrNM_Ph_tP2BgftJ_JRxCfIB0oRE2AKnh9QIAe17ALEmn4SSSnZBPq5nIRM9_66CqwrWFGL/OGuRlMmAvnhOaXNth6YgNBxkU74qbumRpYwiUEeyhRZ0YJgPkMLHJ79Dz960IrwI5nXK9M-IaXTc3jsucnyYb5db8Xcs68xLCu50AoHimx-7tLqcUXY3ThLzMV_FrrFY/.../

http://dc465.4shared.com/download/.../cursorxp_131.exe

Latest 30 of 37 download URLs

Scan cursorxp_free.exe - Powered by Reason Core Security