home

flashcrypt_setup.exe

FSPro Labs

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
FSPro Labs   (signed by FSPro Labs)

Description:
FlashCrypt Setup

MD5:
05cfd07a29e4ef98a36e1e4ea772c2ce

SHA-1:
1b93524e7976cbab269d00824f79b279d960d498

SHA-256:
6501c5d0c5a23f3447d855883c5863dcb3bdf8f2c3ac51b34fc7b5c70f986815

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/4/2025 5:20:39 AM UTC  (today)

File size:
1.2 MB (1,221,744 bytes)

Copyright:
Copyright © 2008 FSPro Labs.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\flashcrypt_setup.exe

Digital Signature
Signed by:
FSPro Labs

Authority:
The USERTRUST Network

Valid from:
2/3/2008 3:00:00 PM

Valid to:
2/3/2009 2:59:59 PM

Subject:
CN=FSPro Labs, O=FSPro Labs, STREET="20-6, P.Toliatti st. apt. 20", L=Taganrog, S=Rostov region, PostalCode=347931, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
0080E3B9672816DE87DBDE23C4121E10F2

File PE Metadata
Compilation timestamp:
6/19/1992 2:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:QfOy5h8886Rq+pqI6CzK1wx4gMSuT0LbqbZJv8dWR/gOL:QGOh88hs+ENCGjC/qbbya

Entry address:
0x98D8

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, EE, 97, FF, FF, E8, F5, A9, FF, FF, E8, 20, CC, FF, FF, E8, 67, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 82, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 38, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 9F, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9873

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file flashcrypt_setup.exe has been seen being distributed by the following 10 URLs.

http://gsf-cf.softonic.com/1b9/352/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69658&instance=softonic_es&type=PROGRAM&Expires=1477744682&Signature=AaMKZJCs1GtwstFjvyKl2kEYz5KC7hQIkN4x7f7kD~hQ07wXZVt~HPw8FAJ93a1R7dDRL2HJpNfSsud2VZcRKrZwQemiPoEkyYRPGkcWcRyFE4rzSZsObr-XbwlW88ZVEoUUVhvXMViBLjkNhuDdke3AXQiiUUW9tDD75GPtcRk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=flashcrypt_setup.exe

http://gsf-cf.softonic.com/1b9/352/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69658&instance=softonic_es&type=PROGRAM&Expires=1477104890&Signature=XXqUsYBqoOCiSJNfI5LdXbnFc~BXZrDRpMZnTapATjbRiUi9OHjt6aMY3FvCJ4mxo-LLQsOASwCum5zlV42AsrE72H2ynu41s73LAtAKn7Ffk02Ut~~ZKRLVrx7vmwRi2yHlDuJ6oBFOKudoacqITcodYDNfxAXXZNb6G0NZmOE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=flashcrypt_setup.exe

http://gigamania.zive.cz/download.ashx?id=7334

http://gsf-cf.softonic.com/1b9/352/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69658&instance=softonic_es&type=PROGRAM&Expires=1472995762&Signature=h4ggE1~LNjD2NX-gQD0p2fVdZoKz33MRSgmou~t5VPmGLNCpINRrLWPaxazkb6XBkFKA9P69jg55iE3fO4FNecx99KchmrqGIrWY9W7FER8-saaKKReKjsRQ64OlUWsI2oSJEuYZbU5vmfEhgmiA5pizGcGTO0k1EtX90DIS~jc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=flashcrypt_setup.exe

http://gsf-cf.softonic.com/1b9/352/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69658&instance=softonic_es&type=PROGRAM&Expires=1462415894&Signature=OEdJpPaWs2AMbTsqg6c3J3DT290IxV0EkmEiIkI~4hbHFh9TsQK3v0gN7MdtHqMTMRaSVkwMpo4P4DzMUCVHiJhibhEEEMCZD--Bm5aaOpp~vft~-LxNJpQtpLHnG9W6l1BRBP~G7GhviCygr0gaBocorT-Z~4rNVUtPmY~iOLI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=flashcrypt_setup.exe

http://gsf-cf.softonic.com/1b9/352/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69658&instance=softonic_es&type=PROGRAM&Expires=1447775343&Signature=DX8jqdTNOnnNJgXcvmyyEb1aTRGz4116plqcXMt~RhFKZhwWoc09Z7x~zrhtuCnD7EzHpSVmRAIvcN0MsqhyPMylT8neiUjgIQ5h4g2tSFVLAkyuoNKBlQlnBXlpA3ImARgKnbY3sFnWb4z7v54zVzHUgbWy-AqDozaloGh5Mn8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=flashcrypt_setup.exe

http://gsf-cf.softonic.com/1b9/352/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69658&instance=softonic_es&type=PROGRAM&Expires=1446495856&Signature=iekhV~63hwIIFfKamZM5J5IgfTof6r-pCinhQc9JrjFFFBBjhy7HcQF0BN2KwO7v1IwlJAOmAJvli3zE8nCW3YYrCndeJP8XeRqgMrp~~67kc1Btczae8bZzNJkwhDT0wHqY8QXbVUbz5MLmvTL2v6niSL1sXaEv~IkjofPSQLQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=flashcrypt_setup.exe

http://gsf-cf.softonic.com/1b9/352/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69658&instance=softonic_es&type=PROGRAM&Expires=1443786076&Signature=WXCl3geUFY7quJIKGF1HJAklT3mO-7KRYZ2cejD5OlEEM0tldojA7CY7x68OUDl8ZzV7EFOMlPhqIAaiN3lK9r-yztdrxMVK~YQDjd34MoYinBVY3MHSJxlqN9dM5q07nxKqtMwjWkTDn0V8erc8pLJDSddVsFzXUqz-Vz1WhHU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=flashcrypt_setup.exe

http://cdn.portalprogramas-download.com/d/.../FlashCrypt

http://download1us.softpedia.com/dl/2f6880334cbd3ebed8186b7aa4b89ec6/540f524b/100095684/software/security/.../flashcrypt_setup.exe

Scan flashcrypt_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.