cxp_free.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
7ef0eb85a2c6a4f0d52051648ec92aa2

SHA-1:
1d17537092e8ea59051803ad75483775ed9b1cdb

SHA-256:
c35d3c7bd3462c1b0052980b20e54a2b165d04316cdb02cd651bf59ba75cc8ad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:29:39 PM UTC  (a few moments ago)

File size:
3.2 MB (3,362,502 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\cxp_free.exe

File PE Metadata
Compilation timestamp:
3/16/2003 5:41:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:KWRikOW76mZGYH0O2W8WFVDUS1Hhruk42ADh6IJ2Yyz7Do6P:hIkD2oGYU/YDBrF4xo3cc

Entry address:
0x4046

Entry point:
83, EC, 0C, 53, 55, 56, 57, FF, 15, C0, 70, 40, 00, 8B, 35, 90, 92, 40, 00, 05, E8, 03, 00, 00, 89, 44, 24, 14, B3, 20, FF, 15, 2C, 70, 40, 00, BF, 00, 04, 00, 00, 68, 60, BF, 42, 00, 57, FF, 15, 5C, 71, 40, 00, 57, FF, 15, B8, 70, 40, 00, 50, FF, 35, 90, 92, 40, 00, FF, 15, B4, 70, 40, 00, 80, 3E, 22, 75, 04, 80, C3, 02, 46, 8B, 2D, 14, 72, 40, 00, EB, 09, 3A, C3, 74, 0B, 56, FF, D5, 8B, F0, 8A, 06, 84, C0, 75, F1, 56, FF, D5, 8B, D8, 89, 5C, 24, 18, EB, 05, 53, FF, D5, 8B, D8, 80, 3B, 20, 74, F6, 80, 3B...
 
[+]

Packer / compiler:
Nullsoft Install System v2.0b2, v2.0b3

Code size:
23.5 KB (24,064 bytes)

The file cxp_free.exe has been seen being distributed by the following 26 URLs.

http://gsf-cf.softonic.com/1d1/753/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13668&instance=softonic_it&type=PROGRAM&Expires=1478932156&Signature=RA4VbS69mVm104y6F9KECQW13vXQC55GBCAyDMW~rUS5~vcZW8bJp1E6cH-iiZ2dN10~rAcBSMaspXEPS1odo-0ETADB79moW3Z0sNu2X~1VJ4iWh9-b11bgtlL3qXnxs2OqH-711Ra-kZzlRcdAi6rHJ~qt8KsimZzNu~ISqq8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cxp_free.exe

http://gsf-cf.softonic.com/1d1/753/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13668&instance=softonic_en&type=PROGRAM&Expires=1476658989&Signature=TCVGHagfluhIdqP8nvCGvEZRspMrsuQ2OXIYqec9XHsBxPcv7PukvAD7XtEZLPq~Z2-CMCe~xoXQbzItcAndVAjvh05NwNd~8Ab9AMTh9ug65J0HEM4rvxoAlRnnBW6mdiO65v-lJGJWwjrcDdTIfcgb~cT6Kkw~thCzNSXHt2Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cxp_free.exe

https://coverxp.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANc6jZmmcn4DoXXwH2nlAIV3yIxhdejcFbIDsQdzuRugYPeJiriePF0HeNGUtKr/X3w3Vhc2LDi1jPcMz2jdu1OvXx1LkHRgTNLulGvr8T3OvjU8CLcXsK7CAhBU9lY2we9gUrI0vbaNVKqJBy4uNVORk/vbiFcup86Q2Ad468P3kcJJIT2lZGwqTjSmY9p/E9pRi865Ezi8K qI/qh/G5bDLzlG/FCyzfqJLRk L6W47Ae110YqknqQyIIKE3QbQfQHSmDHvURwklszuoY6md/vmn9SsPHJBJwgR782YJ88t/XcEUVIk62 FGK1uGqPoIYEjA8kp79LxF3OgbBoC6R3RJFMUVph8Bo9x8WD0NXBEq3ykyMnFErSf6/22TKeIOjWc/15TQLdcbx1jukD4cfN5lPSxnhrmcRyKoDS3JoA2vCRaHd7yUVie9YoC0ryUUIfLvnjoJPW0aXDgwC88aCt13NDsIQ6aFrKFf3ZT7OEbIAT3GvdxrEj cjksi9/yNGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c9dGQWggU 6CO9TH0www/lnYT0Bzm92qFzv I25I//YF

http://gsf-cf.softonic.com/1d1/753/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13668&instance=softonic_en&type=PROGRAM&Expires=1482216232&Signature=GCfolGCKedLiqlOrwcw8~VPTD7Ko1vNysRAnxA3llM3NDl9sJ1HNzkwP3kxzKGgRoC5i6BlZu4ghg5JP8SgoK1mSLwf3-5Pozr5YrYCcRO43dkp5mxoPULIYWZNUIIjgS3vPiYdKUa4SukYTAnLYJHsU18QHo88kvGnbFVy2grE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cxp_free.exe

http://coverxp.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANc6jZmmcn4DoXXwH2nlAIV3yIxhdejcFbIDsQdzuRugYPeJiriePF0HeNGUtKr/X3w3Vhc2LDi1jPcMz2jdu1OvXx1LkHRgTNLulGvr8T3OvjU8CLcXsK7CAhBU9lY2we9gUrI0vbaNVKqJBy4uNVORk/vbiFcup86Q2Ad468P3kcJJIT2lZGwqTjSmY9p/E9pRi865Ezi8K qI/qh/G5bcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlXCzmSG6n/6Vu5i8E3NSPrGVc9zUybOc591lXS x7LlmQeFJM74JTg92NjcZLPFegtKNFe074Fi6JCS7nta/tKwQeP/7DxQH HQxgwoOwcHG34uq2Eb/Qb5do uJ6twwGhZi4ZSfj5y0LWvyodaxSZdeUgGchgmSV1p4mZdf/Ytomo81bTIGVf QzgZjbUsCpYbvJiTsn88fC1KiUQr3OcxMwjWZmd1XI8xH5CJa7Flz56JrGrZpUjrBxTo sy/ktBGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c9dGQWggU 6CO9TH0www/lnYT0Bzm92qFzv I25I//YF

http://dl1.afterdawn.com/download/d30b9065635b96a71d07d6de17a020f2/57e7dc20/.../cxp_free_v1.61.exe

http://gsf-cf.softonic.com/1d1/753/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13668&instance=softonic_it&type=PROGRAM&Expires=1476575650&Signature=e8Gdp87oPFXkqWlbq3YTpwzlETno-q3M50GY93m98qXK9dodLnIyo4MnoDp0OyBB62wtVNANoYJA~F1qaVwrSO1BR~n1~vVP-Z2B2D2L2DeSj8JhhsS1TpwqhfyU-LM0zRsuhR1B5GjXBlpHAG8BbpEFzwgb3ECRyWZbbv2u-78_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cxp_free.exe

https://coverxp.nl.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANWwXj3jgzK4JpOo5U6xPNM3Ytzw5L09S4tJsYltwKnPyDEIVHYCLhCoKK0XWYwit2KhVe2nrprac6Gvl3MAjtGr0ZepIxyMAJkrg/hITvnTCt00zKHRAk6HU9aN8GJcyaB0pDfe2HS7qGmMNHLyQ1w4RwDNWGvV4HBxlY6Qu1/73b0Pw8sixb8Cokxqc131DlTB/5wJZLER6YbIkmIgnN 49yYRnLKp2llMwhmOWhZYjtwsqvrGU4pIvtM8Ri/5Mx/.../8YVwdrQ5jU0fSue4kPPUuyOLvOpVJFTYbwbb359r1mkcLGTioqeE=

http://server3.xnavigation.net/dl/zcsfH/267/13378/defa/.../coverxp

http://gsf-cf.softonic.com/1d1/753/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13668&instance=softonic_es&type=PROGRAM&Expires=1477663851&Signature=FjD1riVFaUyhPTwzB-y3rRKI-2gl3hq8YoRN4hjhSAGmoNT9Uz5XHv3VZWYdxRn484~sBbGwk5Ap8B0k3GwGopvYnQK3eTK5D4fwPenCtL0hc0~306PUJmm55w782rkNvCmLP03-kpOvEv~jJXN5aViVGN-STZpUObE8Ue2ItCE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cxp_free.exe

http://coverxp.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANc6jZmmcn4DoXXwH2nlAIV3yIxhdejcFbIDsQdzuRugYPeJiriePF0HeNGUtKr/X3w3Vhc2LDi1jPcMz2jdu1OvXx1LkHRgTNLulGvr8T3OvjU8CLcXsK7CAhBU9lY2we9gUrI0vbaNVKqJBy4uNVORk/vbiFcup86Q2Ad468P3kcJJIT2lZGwqTjSmY9p/E9pRi865Ezi8K qI/qh/G5bcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlUg25znwhTH7nohuP8WDRcCLKYp7hhO0uekGjCQg8zZo2DNZ6dIJtr3XjnlO7F5lO gpI9oJMRWMAdCXh8TjVKOVOSChtQUOGETiIZEI0 12Ba99O3/p5Vg3zESdsYsZe6e2qa6J3lWm8hc1CBQTe/2YMwyaGzDOKqSdG2Vu77JU2h9vRseYtLakEgqR2zBBRePmoO2HlzIfZ/uDf7/t9 eo0f10vWf8pFFY4vDHgP1daY HGyroycMblorFbJMpZNGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c9dGQWggU 6CO9TH0www/lnYT0Bzm92qFzv I25I//YF

https://coverxp.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWv1XCC7cAA8YSKai3I26MVE6TCU5eqj3wcTckFvC319hSEh0eKUM3qRsG3qVxl6Uc9zbeMDatpggs022 VZp4oB0yRCVvLgsOsZsMCkPiEiOlCXXwDGCXE/exbdxdJIzrgQlm0HgCxUagpwcW629FY5S1Prhk1EiCJxwTnzZc8btmwI0t Cb eO4GipnsNMTLMg2IC8aHx PNcSj2XY4ueaJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugwm7INqNmPb6MS6Xg JwSEr8cJu88VNqztpU3sECkaYhG3I6qCV59vzMnhQxzLhY8WedWQxqMugdufPg1XoEY4eOHem5YasGk6l5bapvOBi9AD5RG3m2YRvApLfUWRB7EufDOyJzHIZX/Q4HUmA1nMo0aRt8rfwJKIzk5SIc7X2nbvc4CecQcdU1vEjXBT tuGE59LWVSbi2zfslg7lWqtYscW3QA6twQU44KIADRCtYNVx47/9SPBIlnxMQODuOPCIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbYaITOY3/.../BwGOC08naytvgD0E9IjdgAz

http://global-shared-files-lw.softonic.com/1d1/753/.../cxp_free.exe

http://gsf-cf.softonic.com/1d1/753/.../file?SD_used=0&channel=WEB&fdh=no&id_file=13668&instance=softonic_en&type=PROGRAM&Expires=1479557975&Signature=Mp5BVC9tBiersSkCfWi4Au3RmNnH-5hb98bF7D3DRg3GKvz~x0Ny0gMy4XyvIiA0Z2UV4a6EKoW6gEsPQkLENtQSvRBcNWR5GmMYz90Ib5Rw99XZ76v2nshgUC-lAgtLTS4bY42efTif4FYzoU12vH8Q1Uvamu1LiIajUgHnOws_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cxp_free.exe

Scan cxp_free.exe - Powered by Reason Core Security