home

freecommanderxe_setup.exe

FreeCommander XE

Marek Jasinski

This is a self-extracting archive and installer. The file has been seen being downloaded from software.naver.com and multiple other hosts.
Publisher:
Marek Jasinski   (signed by Marek Jasinski)

Product:
FreeCommander XE

Description:
FreeCommander XE Setup

MD5:
0a48061718488ef1f2a06e19969f665e

SHA-1:
fb4a9002f7b1f8acab55db9270ba5aaba2d0866b

SHA-256:
85655bb1bd31b17a4a12eebe21740c4ebd70fabf8b497abeaf56c033c168072c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:25:35 PM UTC  (today)

File size:
5.6 MB (5,886,472 bytes)

Product version:
Preview

Copyright:
Copyright © 2003-2013 Marek Jasinski. All rights reserved

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\freecommanderxe_setup.exe

Digital Signature
Signed by:
Marek Jasinski

Subject:
CN=Marek Jasinski, O=Marek Jasinski, STREET=Lerchenstr. 1, L=Moosburg, S=No state, PostalCode=85368, C=DE

Serial number:
00ED2B0A8168241552AAF6C82316B0A09E

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:pBMQDnOhgq46IefSthAu+IBWZjKmWcygiQQin7HDIsVBZYp0lIqnurD1z2HVo:pBlDOhgq46I8S3A0BjcxiQQintVLYp08

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

The file freecommanderxe_setup.exe has been discovered within the following program.

360Amigo System Speedup Free  by 360Amigo
360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
 
Powered by Should I Remove It?

The file freecommanderxe_setup.exe has been seen being distributed by the following 7 URLs.

http://software.naver.com/api/.../httpDown.nhn?softwareId=MFS_118030|32|GWV_003778&key=844bb1bbcd1919bffc23ea5e31a01659d0d3e22734853546e007d1c2d2984d9f870c1a5c70e9057b6ffc2a05cea3094bc49ff1ed9d6fe109778a8d42dd5bc77fac4c48d921e089e0688a78570be196ab7fdca4ef74b0dd37e4c66fb694ff6f9594ec8159fd43391a54613a2d664337b82e2dcfae0ac036a967db689c584b0bfd74d0a5229e5c358cb2e153eaafd35b3fb891b0182a19b38b58d02da9dbb76bf05ab11b383116d8453367764c58ffbf1d0018ecfb5d2801ced227886d2813de3bc37d682f5fad445c72079483c6f3ac03628b27b648f7dd3fba84445a6de08be161b7ea968e9087bcea5cc5e6a2f5da06c75589356d08aead3ada5fce000fea900f5067948883342ca7e44d3b0d9fa323

http://d2.computerbild.de/?ic_user_id=917

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../FreeCommanderXE_setup.exe

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/4797/FreeCommanderXE_setup.exe?__cbodl__=1389478717_f354f17155ae44721e2824968392c4c2&_chksum_=0a48061718488ef1f2a06e19969f665e;ct=1;thc=1;b=4797;c=8206;tit=FreeCommander XE 2014 (Build 650);url=http://www.computerbild.de/.../FreeCommander-XE-2014-8206.html;sep=|;tce=|;tid=541;tn=Dateimanager;tp=95|362;tc=95|362|541;tpn=Software Kategorie|Tuning & System;cs=1

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/4797/FreeCommanderXE_setup.exe?__cbodl__=1389368100_964fd0df332c231545855247f912545a&_chksum_=0a48061718488ef1f2a06e19969f665e;ct=1;thc=1;b=4797;c=8206;tit=FreeCommander XE 2014 (Build 650);url=http://www.computerbild.de/.../FreeCommander-XE-2014-8206.html;sep=|;tce=|;tid=541;tn=Dateimanager;tp=95|362;tc=95|362|541;tpn=Software Kategorie|Tuning & System;cs=1

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/4797/FreeCommanderXE_setup.exe?__cbodl__=1389371297_191e5c4206633165cd2208a6cd3870da&_chksum_=0a48061718488ef1f2a06e19969f665e;ct=1;thc=1;b=4797;c=8206;tit=FreeCommander XE 2014 (Build 650);url=http://www.computerbild.de/.../FreeCommander-XE-2014-8206.html;sep=|;tce=|;tid=541;tn=Dateimanager;tp=95|362;tc=95|362|541;tpn=Software Kategorie|Tuning & System;cs=1

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/4797/FreeCommanderXE_setup.exe?__cbodl__=1389368341_84539ffe16ded680cbea7b9262376443&_chksum_=0a48061718488ef1f2a06e19969f665e;ct=1;thc=1;b=4797;c=8206;tit=FreeCommander XE 2014 (Build 650);url=http://www.computerbild.de/.../FreeCommander-XE-2014-8206.html;sep=|;tce=|;tid=541;tn=Dateimanager;tp=95|362;tc=95|362|541;tpn=Software Kategorie|Tuning & System;cs=1

Scan freecommanderxe_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.