home

freeproxy.exe

MD5:
b8b794a47600310ef7b731cc62149a1d

SHA-1:
f6f253c8d3a739d472a7e2ce9daa0de1d402d52f

SHA-256:
83c94a3647b0e8053140df6cef67aefa8a4df818da080bf714578ed84e35f4c6

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 4:32:31 AM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.Script.Gen
2.1.4+

McAfee
Artemis!B8B794A47600
5600.7231

Trend Micro House Call
HV_MALAGENT_CA2248A3.TOMC
7.2.34

File size:
179 KB (183,296 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\freeproxy.exe

File PE Metadata
Compilation timestamp:
11/16/2011 11:33:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:SHTXho+C+ywbnF5qgwsX9NWtEZw5mByU/4lo95i4WfZo8k743c5NcuNVFIB4:SHT2h8p539tKEYeAbk7GcIu64

Entry address:
0x274E8

Entry point:
55, 8B, EC, 83, C4, E4, 53, 56, 57, 33, C0, 89, 45, E4, 89, 45, EC, 89, 45, E8, B8, 50, 6B, 42, 00, E8, 8E, F7, FD, FF, 33, C0, 55, 68, 77, 77, 42, 00, 64, FF, 30, 64, 89, 20, 33, C0, A3, CC, EA, 42, 00, A1, 54, 8C, 42, 00, 33, D2, 89, 10, B3, 01, 33, C0, 55, 68, 5E, 75, 42, 00, 64, FF, 30, 64, 89, 20, 68, 90, 77, 42, 00, 6A, 0A, 8B, 0D, 2C, 8D, 42, 00, 8B, 09, B2, 01, A1, 40, 67, 41, 00, E8, A9, 20, FF, FF, A3, CC, EA, 42, 00, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 16, E9, 11, CB, FD, FF, 33, DB, A1, CC, EA...
 
[+]

Entropy:
6.3804

Developed / compiled with:
Microsoft Visual C++

Code size:
153.5 KB (157,184 bytes)

The file freeproxy.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1451040692&Signature=imJXuY1fGnopEwbTwx6NKvtsiCbBFQ0rjJcNzOI55cVLJz4F~6L~-avdwPQE~FnfaRsFrQ~scMziu4mXu8AobH2oPJWkJIm-ykFoM5YUPJ8sYCAvufjYGwH9fRQQ61dlR5hFJ8bARJ-60y~ThGmPKQegDQzAaHaRNLXz7F7ydK4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1446602571&Signature=TQ1~YZPQsIL1NcvyARH2Vdtvw03~v0l58JvGfaNdZIQK2Dwla8sZfkMggInLvJH2FtMWzLZ4vLJ0t~Az6~aCu-f5IwgrIRoA~EqVrxi9ZClCn4wMhvYpbgcM4upWBiWE0V-0efmrqllIA8d3WxE9nVVGPl5p18zJpJBqP4FBals_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1483137079&Signature=KnM296hDblNNK1GuEgkId3hFBQo91mAITFMqMi2-vL3hRG2KIOE67SH3GkvybRKnIqBUoeoZJFEC3xqDPRQoN5wmIk518LrpW8Bq14I2Jn9fHzSejZHRwoC7jaHK3i~uEbqwpW9nsdToYvgA7Hek-ZTLsYQ17ycxfCnncfx1DAQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1481944152&Signature=i2Mj5mimLhATksMLN5H1IUBVLhxoUckDbJ6LPt03D2GjLX25IkYNmV4CQBjdbRTzkZslAHOxuP-A-uKb3z~9TNVEftQ4uQCRYBozJfOQwwy5CAqkPrLSjoj8DophzkqnG6s2acf4KKUMam4h9ww4AmNWULHCMknIXpxIWbu3xp0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://securefilecloud.net/.../free-proxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1456002071&Signature=flIrFL~L~Kou0S420epjUY2jAT8MLmHmsjtqBALrUS7m6aEv7UFlbgcmO9UzJ58FncjhvU~oJ93LkX3fOjyxBPkpghrt30c0PJjwpr8109EIhCAcI2Jms6F4FDnuAqfmk2k9pCohYhe2b9-vutv64JsU6hSMPxwj1mQxWUv--xg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1479068556&Signature=IwToM9xNw0RBeaMohCDju-rtyo5ek3oMUTw89PqloBAyUI3oPBntXZBqnxi~oBKl~JgsMqIMIaIfrghZVYb4t16eBye6M5sc4ErElh~XRtikII-4iCc8LnZV3UyUZSQyeHIBjO8dL68fwffvmDOROXH3Fmv8-D8ClguYaUQ8-AQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1474351961&Signature=a7BgwW2wYAWedbIT7bCU1RwhTyRHMgc6qgquvoh8qD1el6E1SMI5i1YvAXzdUqxQDusviLjtEJ3vlSi32vVmT2wnT10vPOU49j3CAMT5HPFe6REJv5mURXCM8D~zTDz0YbDERgj2yzAiD7cvMijz3incpNlg8Gq-UkyJ04P62SM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1477846865&Signature=Yb~IxvSDqilUG-RYa0V1MXgzOikFd8OrRgDppLaswIXtcPOfDJIfZlWhU5-4466jkKFwBwri5LGIf3zIVnW9CpEaL~MPPxNyKEJwhpWVsslOMSuaXvfJpIQYZGOIGHXyKx9Kk3tDDU~UeAVimzYrhMqj3PlzbDMDbIxR6znpcKk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://www.softwaresharetoday.com/TiNvi_MloEZo4cKIVgGUsN6XEcyhFJ9FtVviI41RdX3_2e_QO1j9OQKqSCRjsI6d6UFbsd567w4Z98WFd2TQcAPUvxe_flpoBsBH2rbxh8WnVDZbMXchdoypNfwzDmMBcaVj5tPRSc3B4mq4PyvA0RudUxPxnXWrw85sGyEGNSL9hFbjH1mGwj8fLedw2_LDXc6_Anda-G1AAAGRwXmuLuxGJChA24MAlokCzwfC su1jd13bEugL 2VZq6lo4hDZjvX7oSesv1o5L0kLqcCwOj__o HYdwtv7UxvQS1hJEPiBInRLA==

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1476550832&Signature=JeAG45wZp2m38k7h3vCAqmbZwKKoIQt9KW7ZNj5UBfmHBW1yRDucWdUWQeyymlln6eG~92es9nXR5D~ZEc4Dwy8lH-hW9TeuLwlhTq9VE6ENL8icdl68zCQNpOxjW9THfR-AxZWB2x8tk~POlY0Tr2YvjuYinPRFDTJ-95m07iQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1480147884&Signature=K09iBR3buqSFgqqYc~s4AaYTvetKYqc7BU-6q-K9ygmiupdWGQnVsBLza1PrCUKPiIuSacZeqkeD7u4bTpYIIwb4bptI-O5XfqOrJFNEoTaiECNyEwIENkRoE8~ke3m-3LaBTIXNJcAJpP9nn2P7p4Rq1y115sRGzYGfpoYhkVY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1434488807&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UBJ1egaNZGP1yqQznerEMob6OKmFXW2HmKo-Eu6BggNCcl2mgyGimt7NHsXJ5K1wiz6O5WmUR7LUzuJPIMNQcSjj69W3T2N5bepCUHBfOsD5ga7HLkBqEvo3qzlGWaXfJuzzGPRhfoDSrlDI90MHCjTcg9Z~nZfih-a2WhfBTDc_&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1476588394&Signature=YDqBIdaw-nz~EWcq0mADqR4-2GgYrMd9cBPGCWw1V6HNRGZPf0M~VoCqJ6SF0ecgEV-1jvKSA6JEVGF5ZaNranGTV5bQsqYujnU-vZzD0kZ~3VQKERtBlf-klwtA9Ns9ZPGJbz9364n33Au6zalHRNo11kh~vlouOq3Hcin33u8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1476226115&Signature=EsKE9vCFgecITftXkXA~cC0yeJPfrl-hURuVrKhoQtkRsoPSL4dFmvCD31B-kbcocD9qrbboEdt7B1nY7UHLv0k-lkfJ5VanGwc5PsS1xi7iZFCKV2H-tc~kTAByOzWD~Qdc3aQUevZihK6~EsJ-CdF2D~R9u4RXfGtU5Yes5tg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1428476632&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=a2EKILvtxTLufEcX0PP5OvibNzVpmwVH074ERDejTsx3k7KFaAEVCecluAzn58UvXiAmtMWdNHTE8aAdtSDhbkaLEXnyXSYuvkuPuFv0k97tMeGzJX4-NzNF8CDrOrxMnhWWLidrnw2cxpxjcnNO1fdGQSu9~nUBFWrTGzL7qSY_&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1477380891&Signature=G0UEwnBfRwPDjbNeN6-bdR3v84pStdCCQORLOCaH6YotHuYpQs~4xp~-vN4BG88PUukuiZClGZRs1oXAgbk5NFKm8diZ9TtqU6uOK-p0XzczIEn3dgF0hz-ofBIQ3uZ3fDdYRHofKoApFQDA5NI-sa1lf0iNQ8jLuqKcB03OTZY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1457916796&Signature=EEN0Q69mgJPieMjuKD9SiKUCPM6WLzF61zduseKMVJiJ4QPT6geeVqGvVXJmsCnbAHHjen8C6oUhvqFHZMJd3hPf8JBLqq-tHrCc29uHJ1n3hsEUigugCrPu3uk0eYp87toHmrwMcyI2oGeZmzS0OhtKgZdz00qMhXdmGo4aAuw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1476489648&Signature=P0ugdTJJec-vnZXixfOkUmUITgjVvDmON5~7LJ2b3WChm77hj8m8o8YufTXfjVNr9y9Efv2q3tO5szCF-a3cMrBubjeaWjZX2OVAmiWiah4LCXWfQDbSdADkCnaeIRmiGFQ38bVrbSyBlUQb-1XIZGzbzmYd1z9E9cQJBOkTR4M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1475492043&Signature=ALcdb8JoTbTwHqTGX~kClBJznX905barc0sLtzg-mQhiulaRUWBgl3igtBHXOUCXlCrPFcrykZY0iGXyozKR8zAREZdUOwCgb-FityavAY1psXVoINdqTfzI-wMEMvz9jEYPXtO~ZA4H5n0X~n0E3T3SygrMT7ppcXvdU81skBM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1460004397&Signature=eijlcr~rTI3giLTTagL7~fq79ZsT0adTPQ-NA~8Sc-v-39YyBfiODtZjAIZjRN0LqoDess4C2w~9f9Wd37ofjoUotTLna5ZRN20mXmAG2p1q4IcJ6tMKnM0-G1H7WtbXa9b4GNaErtnupNElroda9mEHTPwlAKDYqPFtTEGeIoo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1478759953&Signature=Fhq17eYiLBzwpWuDJ-olim46SvN4j9F0Ul-fLMFOgb8KfHw9QKT-5J9lEu5R4JR67MijNzMCOgR79SDFIauj2WoOUCUKZ53EkAf1Hs52aUejFCCDwMmd~~fsExUZR0AeimZhSXn0BPmnQ7yUHzonbljW8Uq1HNzrvXp9DyOXHAU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1476494861&Signature=RRBDHMLwOqK9NFJwJkXx5emBO8-Bpnhxs5b9aHhl0IRRaZ-72g12KIq~M0QAfRfXAkKJXsNRH1vaxuUNq2Dl2RLBILYnhiwa~YfoNX3eYGohEDafb6xUSJX7U4Y6QsZhgKhg-ELdinHPxb62FiMAr7KzI50qgDERJIUzyMAYHNw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1477630136&Signature=fpU9rLSPSgC8si8DvKKe3MQ7Ceqy3w~Bn-SS2CTryNYlv5nD8v0Tsr0nFQThi3GBgoNEPtULWtJgD-TXLPyMvxZXhZQdzWQ5-BUyIaJgSVjBIBthwXfgkN36LXewv03rsuWOYTOfxQgBoFguuO1HvyrodwWNCnNxtlooAFdarnw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1475670278&Signature=Vy7YVVR7mfumuPVqSN6m2RemJVDw8C78b07kRZy0426cH8RIvRbBLtzGCKigOoxk~gj8b7LOUACixkYbE7gMw8CV0vkhHkPxBPJ96-iI4Bn3inOxIu42VABGozmtaPMDN7OQsgnxQ3au32kb4kW5UU7Xcg9hVF33v0NX09jJCD4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1442135440&Signature=fPamMOIpk16KK9VIHWzBXTFdPdYW-xOmc6Vvn51qgSsPIHZrKp9fR7z0WhUqyOLKTP32qMbec9BcfvRNf82uWEzcIg1aaWdLS00Es~M0xUzTIq8ATxRT1VJNNPmS3QzbYwy7yolTR3X6dC78VUuQ6gcpTrMUpRTiJ39hzhOcQjs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1457048917&Signature=EtEbfcOuPzGAhBu1Hl0gkhsN0RxiG2uQMj7bN5O6ZcnmrZaSCSfZ1vz56BtO6Vv5~5qAxlP3D2sc~bl8uJ8gibaDIDbFyr9qDHVPuhceG~sU18inG3eVTKwiU2wcGyNRhva51lpu-SQHZpObWOxOLCc9BBVLr3WldK6IJFvgu1c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1427443466&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=KyI-aeC10Vk3q258PiJLdEP9EEHZ5wbWwf0nJW-hucTG2GQ9pMmLC36U0n5fPsNK9rpAgFjzYLREWyvRmTA0a--Y6WvHhvAESR5xxBo5Bsl5iBwJJPCHQ~s6aCfN-~5z4s1KsPrelsR1IZQPeWCHp-0coIUQIjy37RgC2DmspSE_&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1447841009&Signature=MJEsNhpeTR2UxGvmVA-mpqw-vQmOXi0aFiYEFE4GBvuSVSvXph3f2QFXyIezta0Ei0aqDjW6vKh66n5DEPE3uoHZPU-21jrPAvVnNaqZn1A-ezzZx1yMKBoEQUIDJCNnwJeZaZUCh8lUUY3kYjg~2ddGF71boSF0M~fJczBtp68_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

http://gsf-cf.softonic.com/f6f/253/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3343265&instance=softonic_en&type=PROGRAM&Expires=1468471362&Signature=a7HKkzOWMJOncW8huaLfro1QhZMBP0HzIWz4-gUj8PvojHayl8imnkvWrbuYWtjm4YPCrEOQW-5P6wHj8ewESaIuPBLMknNYd-ySdV~nn3N60e27p7Bbd71nRLrQRAASjoK8nCWgf9JhRM9z1aLd2okBWLfzY2PPHy3btYtgbAk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeproxy.exe

Latest 30 of 71 download URLs

Scan freeproxy.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.