» defragsetup_2.7.exe
Overview
Analysis
File Details
Programs (1)
Downloads (3)

defragsetup_2.7.exe

Smart Defrag 2

IObit Information Technology

The program is a setup application that uses the Inno Setup installer. This file is installed with the program Smart Defrag 2. The file has been seen being downloaded from files6.majorgeeks.com and multiple other hosts.

File name:

defragsetup_2.7.exe

Publisher:

IObit (signed by IObit Information Technology)

Product:

Smart Defrag 2

Description:

Smart Defrag v2

Version:

2.7.0.1163

MD5:

7b05ace2d273c159499055064c29b9bd

SHA-1:

ca05a98f154209871baa05a636e9338a47f4b0f7

SHA-256:

1b63d12c996161d69fd593d9c6e430613dc2b49a2ba21c07bd303d74f4f0f127

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/18/2024 11:09:31 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

ESET NOD32

Win32/Toolbar.Widgi (variant)

8.9502

File size:

4.7 MB (4,976,384 bytes)

Product version:

2.7

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\defragsetup_2.7.exe

Digital Signature

Signed by:

IObit Information Technology

Authority:

VeriSign, Inc.

Valid from:

12/8/2009 1:00:00 AM

Valid to:

1/5/2013 12:59:59 AM

Subject:

CN=IObit Information Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IObit Information Technology, L=ChengDu, S=SiChuan, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

2B8F44226C2D9E0EDF5765B0D7A21B51

File PE Metadata

Compilation timestamp:

7/9/2012 3:41:29 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:Um2m+Vuf6UFmMUTGTm9eni0XQHJdaUJ89zJAr7V+Rdb2BPWiQvixGeV/:Um2mCuf6JMUp9e0fPrJidbUPiq/

Entry address:

0x16478

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B8, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 56, EC, FF, FF, E8, FD, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, E8, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, D6, 41, 00, B2, 01... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

84 KB (86,016 bytes)

The file defragsetup_2.7.exe has been discovered within the following program.

Smart Defrag 2 by IObit

Publisher's description - “It is known that disk fragment has been a primary cause of slow and unstable PC performance.”

www.iobit.com

25% remove it

The file defragsetup_2.7.exe has been seen being distributed by the following 3 URLs.

http://files6.majorgeeks.com/files/6855456e2fe46a9d49d3d3af4f57443d/.../defragsetup.exe

http://files6.majorgeeks.com/files/f6002b64f932b16eb8fc5cec2690beb9/.../defragsetup.exe

http://files7.majorgeeks.com/files/e97bab5d4b13eb276aa4209d0f7d4f72/.../defragsetup.exe

Scan defragsetup_2.7.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.