home

easysetup.vtsafe.exe

TinaSoft Software & Internet Solutiıons

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
TinaSoft Software & Internet Solutiıons

Description:
EasyCafe Software (Firewall Edition)

Version:
2.2

MD5:
6663f0d56043bde4445629061ff4ba85

SHA-1:
019c0846007e541e8db429d5e38c1f4f21c0b3f9

SHA-256:
f935863e4d0cd260c10eb91797b55754409865b479bedfda3d4b798104695573

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/23/2024 6:58:19 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Win32.Generic.148E8CE3!344886499
23.00.65.14424

File size:
10.9 MB (11,465,096 bytes)

Copyright:
2003 © TinaSoft Software

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

Common path:
C:\users\{user}\downloads\easysetup.vtsafe.exe

File PE Metadata
Compilation timestamp:
4/25/2000 4:37:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:lQXy0IdIMzc/AR5q1e9Gz44HXMR4llrQBjkc9NA+jt6trlhCRG4n3Up0ALbWJN5b:RCMn+A9ZoXlhiAyNAYO3aEaA25qK

Entry address:
0x21AF

Entry point:
55, 8B, EC, 81, EC, 2C, 05, 00, 00, 53, 56, 57, 6A, 01, 5E, 6A, 04, 89, 75, E8, FF, 15, 54, 40, 40, 00, FF, 15, 50, 40, 40, 00, 8B, F8, 89, 7D, F4, 8A, 07, 3C, 22, 0F, 85, 90, 00, 00, 00, 8A, 47, 01, 47, 89, 7D, F4, 33, DB, 3A, C3, 74, 0D, 3C, 22, 74, 09, 8A, 47, 01, 47, 89, 7D, F4, EB, EF, 80, 3F, 22, 75, 04, 47, 89, 7D, F4, 80, 3F, 20, 75, 09, 47, 80, 3F, 20, 74, FA, 89, 7D, F4, 53, FF, 15, 6C, 40, 40, 00, 80, 3F, 2F, 89, 45, F8, 75, 28, 8A, 47, 01, 3C, 53, 74, 04, 3C, 73, 75, 06, 89, 35, 58, 53, 40, 00...
 
[+]

Entropy:
7.9996

Packer / compiler:
Wise Installer Stub

Code size:
8.5 KB (8,704 bytes)

The file easysetup.vtsafe.exe has been discovered within the following program.

EasyCafe Server 2.2 (Firewall Edition)  by TinaSoft Software & Internet Solutions
www.tinasoft.com/easycafe/support.htm
About 2% of users remove it
 
Powered by Should I Remove It?

The file easysetup.vtsafe.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1484425243&Signature=dt-wYcm2XNOHkUsCuNBMCd4s7BfDYNQ20PY6J0OerQzqE7sJhEQ9d2jnMYBQEuO1IB4hY-idRaXNjgPYaArgR9kmc9O6jHkrkFRkoDZP0kgklwtH9H1EWWkCMr81hIQjCU5SW6V8tBYwaoW-qYqpGqlj0uMVPEz7lqFMg~TSOMI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1482957805&Signature=QKPWWfQ5Zr0wGT1T9yGfczTokOE1Dt1VnvaJCt3IuaEz~P2ZQNqB~CqkXlzZA3DlsTvgBJgW7o~O1q2eIdsOJ9QfT5RLHcK~XSDpF8MsojbrNzU-6rbpNgTeykSXOWt8Yxfdnm3uWFb2RUQfZxComf3yYfPIpPD4FgWLqtwoe80_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1485808497&Signature=iEgEDnzUxMEu8HBiebMTTF6ZiAzk~YrMlP4hIZzFX6UyEKlJmlnMV4HrTjjIXN5LFcZ1jAFwI8tsTJZ87cs0w-VQKCORpiybEZegJ3k93tumSs8JgKCJzbVVWmihKv3iK~ZR7SAdDXSFOZ9OGRT2IL~8WL83Rn3Lzt7BeE3Hg4k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1481063374&Signature=W-vbN1PBU5C~TcaR4~LoPV-3P~YtdL32vnfC42plXex3Wt7SKesEZdHndRGevgXG1qij121L28vkWbZuoi76~bAD9~zbMJe6IrVav12qIDF9~lmThle8L~nOwL2SehyT~FCmUjdby6xQbcruLeT~zjZMUi~tPuXRGIycj8kq6pw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://download1852.mediafire.com/uulm09skzvpg/.../easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1483148065&Signature=K32N~~gVcMuCT-R3W9EYf9wq5RAG2-5twzl5D4lw3j60qbAiiszli-nBrQAhUM3XNS08l7RrYIDRslt1snMLd2U-yZwHzUrwSBp5IiCh09QufsAIRDyss-cvtCNEJQpFe8mOya-K4nclgp~PEcIv-lSproO~D7~l41J6r64aHGo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://download2104.mediafire.com/d0hjfo46ujfg/.../easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_en&type=PROGRAM&Expires=1484798418&Signature=aKsEB9uV8kk~ftb8fPkGF~N9LzTC5BypeQoZb61TLxtwu~SHb8nUCG5GKZ5G~Y-kPD7kUG9Z9ekBXcWR~r2Z0EcGFzWMrnc-NV8BHKBYlSGZqFgn5idB8YO6B1JLbRIUpRo-tgPejD88mnZU2XlnfNpnHIkq8x0m06v4zGOLDRI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1483341509&Signature=VjAvFNBHgL~HWo1T26U1~vp-hizVrfN-VaQtn9DjxJ7NEweuGV0oNORRSmgtYiIGcMkhnsCwyUcZ35A0BXpfYmEdWtlsjmjXswqOwpWasKeYPaRCiDI3b1vKJyRxfpT4mG~Qixp4nbch7djPs5luNyo5kadWblmbujgKvz0Ceb8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://download2104.mediafire.com/wbclilz412qg/.../easysetup.exe

http://ultradownloads.com.br/.../2,1111627.html

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_en&type=PROGRAM&Expires=1437469542&Signature=R0yOXpRVrtuIMJ-Imlf5aVgIpMiihfZsOtA8w0~2~9ao8osyPt6wyJ9GMM2fKnMPNGdUz8JLIz4~pgemVz6BpNe8k0WDBKB-mi5BmcLset5QAvpPReqYii56afYAbvFviOzOF19Btw1u31inkXigvugmEd4nwfd-V0MONNKhs4Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1476663106&Signature=hytPhR6YCRyg7k4uUuBkAhK~8SZJjRsRWgVrxoCssZNZNdDxoSqHYJZTljZkZuktAM5sATiN1z1W0jlg1H3DxGSyk254LbXbQzy1~RUBt~6rFK6d6UTNiRt2nrhzc86V39T3H2rsN-ZlSHV-4Ad8aze~PCznfOoy5IqJsTsUXm8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

https://tinasoft-easycafe.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOLABCJUHMcXeByXKvHXUR6qKdc0V0C1jtNrWBmTxvP/.../WSXKkoy0aQxuJePhb03e57me2YG5ZDGKXVgrUcW6WqBET0eh3mhF5Y9V2gpXSp45owuHGyEe1Kg=

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1476353979&Signature=g0t9B2rlOaU7nK~K5A~Z-OOUMgYlRvMmIm3DfeatheqopSQNHrJddaXawjhHnUq6oFZuAfCCnvUTPRAYV4KrG4aRwoyZdSNadBRUwhQ~94XBt-b-5riiLUtN4V-hu2RYEcuna4PDAksnL~SMHXQ-f3PZGgsA1DTjxCvPCJz3b-c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1476648135&Signature=ihOMybBadRN1KnwkewIhhQKe30H5FHQUKxdLjnXtFiuLavFghzNn44UwIQs1TDkrG4zCqqOSTWcCkTrt1Q00ohMSUgaTzNTMoqnD3XQnmV4gwcLvdihxVlvmbaiONVLqYhGbNQ6dp6ae1BZ6JqyTZDiFT6Ybsb5Y1JAyPBhXN0A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1482106646&Signature=IUUSRpkNzYz794NY96m-0HsVaFN2NQxd8mUI5U1af8HXLklcQLVN~55JwVKoL-iXal3E3iQfGHz8aHL6jLkiDa4jhmgiDjWgWFm-fp59vNXnPuveRCj62QnzzEwu7k1u4jslaYJSvbN3OXu1EQmG2iQttOlNrPbvIZ3GsI49DaA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://download1606.mediafire.com/y9rqi7s5h7bg/.../easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1478029776&Signature=I5xSbvhuoMngw7ES~AIAtsUPrR4P4DZoVgX4Y47g124MY~i~9NALU1E3bmXfVsPlST5M26FgrYzsVFI-fw5ZCrBhAorNI71mpOlIEQGLz5fTD3K3hY91oy-FME6EMEYEXHhfRAN9ZFxNctw9E0641THzwzVwKUseXarGoDZDusI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1474503116&Signature=ivCuciunwuuKx6IWkqKd5~vymnMLRMMkV7s8l8VhWCErQe9xgYWavz5nRJ75HCGIFFZqOgvsdb1oTpmnKGtWOVQNO95hXYsDZpqS9ZagH~~p2-42rIshvDsXFUedbz~Z4a5yHuMsRJ5bLTADO5uZcObFVnWSY06Ihq8p7lHvKxo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://download2143.mediafire.com/9rbq286mqjdg/.../easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1476532464&Signature=bGL4kA-c0f7VHos4~NRiX90BecjIGkroYnElvY5oFS9v143co-5IdJh5L9KH6qTyFYL8Ub8T2UU~mPM56o0gsNocSZtGc4hWT2vFre8BYqyhZw2a7uPy2itle4Cn9X0JmeodSDJ-GO6XN3LyWrvRrUC~TinCPjIj9Pme-0~XW80_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://download1606.mediafire.com/bb7m72o60c2g/.../easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1477373491&Signature=A1tjqwHBpjqQuXnBrUP9nCC5fOYEe6Yj8FDTsWWF5g~3L2ir-rqmz9Rb-OtN~nK-3Vhv7-poXXBvtK39CIfI8gFA~~KmyURAbm8nf7--SkcTWj8XnrIkCDkFTAi6xfUn~Ew2UXCdfxIc~4did9KmVNRTVkn45mZcFCM3TMI9u0c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://dc619.4shared.com/download/.../easysetup.exe

http://download2104.mediafire.com/zj3f24pf2stg/.../easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_en&type=PROGRAM&Expires=1474756371&Signature=HYoQwEN3pQoMcDtrxqj7zReq7camNceKHvg7T7MmSoU30vsbfGVwZBh07IZPpPtNnVcQWerl-zFhrgfHCEn6yBfszmoz-504TP2cf-fU9T0Rhd-5fTRMB1e0T4AoH2T-GviCmfge0S-ksdH6oXKGyjo0-Mv0vIiVUEyoYPVEwW0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://gsf-cf.softonic.com/019/c08/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15701&instance=softonic_fr&type=PROGRAM&Expires=1479711051&Signature=XqDZr30el2IO-ykCulV6hrnc9xaZsohjsh2bla~H6gnB4ikzcGJ8DRhWQlo4Q60bLATzzF8p3dn0jrWPZtmCyucu~xQAAbMq~CZ9JhgyZJJn~PCQeA21YcZj0mVuCPf-sWNIQJuZqVqtbgvyE~IfOKCUmpzcQua8pbvInShbrRg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=easysetup.exe

http://download793.mediafire.com/8wv7udvpw3hg/.../easysetup.exe

http://download1852.mediafire.com/wg8eqb054nrg/.../easysetup.exe

Latest 30 of 81 download URLs

Scan easysetup.vtsafe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.