home

icqsetup.exe

ICQ LTD

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ICQ  (signed by ICQ LTD)

Product:
ICQ

Version:
8, 2, 6901, 0

MD5:
2e046949945a549c92e0824d47357fd9

SHA-1:
a8e419afd6aeb2353de53b40f6321cf015929229

SHA-256:
8690f534c8ab6a7163da37dd38cbe379a4f08a7febe3836c1b524776ddc48bdd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/4/2025 10:07:07 AM UTC  (today)

File size:
37.6 MB (39,431,496 bytes)

Product version:
8, 2, 6901, 0

Copyright:
Copyright (C) 2001 - 2013

Original file name:
icqsetup.exe

File type:
Executable application (Win32 EXE)

Language:
Ruština (Rusko)

Common path:
C:\users\{user}\appdata\local\temp\icqsetup.exe

Digital Signature
Signed by:
ICQ LTD

Authority:
VeriSign, Inc.

Valid from:
8/13/2013 2:00:00 AM

Valid to:
8/13/2016 1:59:59 AM

Subject:
CN=ICQ LTD, OU=ICQ LTD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ICQ LTD, L=Tel Aviv, S=Alberta, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3CD0B62DDB9C535FD03D4EF0A75D7CE4

File PE Metadata
Compilation timestamp:
12/27/2013 1:05:47 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
786432:IHrN9nhmx3FjiL8SrEVv/vld2lnzwUJTHWaV/1:IHhRIx31iL8KEVv3ylzwUJn1

Entry address:
0x2AC80B

Entry point:
E8, DC, 0A, 01, 00, E9, 39, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 14, 85, F6, 75, 04, 33, C0, EB, 6D, 8B, 45, 08, 85, C0, 75, 13, E8, 09, 98, 00, 00, 6A, 16, 5E, 89, 30, E8, FD, 12, 01, 00, 8B, C6, EB, 53, 57, 8B, 7D, 10, 85, FF, 74, 14, 39, 75, 0C, 72, 0F, 56, 57, 50, E8, 3D, 1B, 00, 00, 83, C4, 0C, 33, C0, EB, 36, FF, 75, 0C, 6A, 00, 50, E8, AB, 0A, 00, 00, 83, C4, 0C, 85, FF, 75, 09, E8, C8, 97, 00, 00, 6A, 16, EB, 0C, 39, 75, 0C, 73, 13, E8, BA, 97, 00, 00, 6A, 22, 5E, 89, 30, E8, AE, 12, 01, 00, 8B, C6...
 
[+]

Code size:
3.9 MB (4,066,816 bytes)

The file icqsetup.exe has been discovered within the following program.

Toolwiz Time Freeze 2014  by ToolWiz
www.Toolwiz.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file icqsetup.exe has been seen being distributed by the following 33 URLs.

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_es&type=PROGRAM&Expires=1477430008&Signature=BbPHF9ujDXmLBeAkRn9i~-K5Tuf0D8oxSbTqSgPOr04P~Ujse8GjZQmq-WAvrrwQ71l4U4n4-nXNNMfRevXWqzuy~p1ldLQGnDj6o1i4W39Ym~i4aTXK3avWpqULVd3D7Z~LZVPf73HlGF5R9TcnhafqNv7J9O8mBVRzYmctPbc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_es&type=PROGRAM&Expires=1461856811&Signature=DyctdNvLmrXhaljcVjmJez79fM98vsKK6EycpAdTSSuaYPAI68GHlrsD2zeyDl5bANk250XpkkWzHelmZ1YozvJVc1zAPird98HyczoM0wReFkoIZoKmQfQzDuFHDvL2IjnZmsg5PtWmUxTApB1cGJqF4kl9Eq6~a-9hYTkQJWU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_es&type=PROGRAM&Expires=1478789945&Signature=BBpS6keRmTHXVmjQHaQ-yFM-MWynPLLSXG2tNij1QVjmA2hDw~xROFQktFHEwBNZNzoz6k1fKw2~V0dwTYLTajj-vQuV-TBsvb5tHS2A0byV1ATaWdO1AGhx7twZhZ4h6Xqlct6aFvSaCkqMzQCfFkQGcvAhMF1RBTQfSaNFhQk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_fr&type=PROGRAM&Expires=1477129134&Signature=LabUOhOSEiwSNUJ3epZ5Fg~1MLFUgD7WJSlpWfobQS3-x4upFsyhljgNVcfcWrX0QrHT~0nJ8eKdKAaXjxEguC~uELWO9dBMP1yCY9CRoAmfxZmnoLYlPsWp4B0LHZx1FM04Tnk8jNHV~sHhb21UlF65lpUSTvWnjcQUKoJ3B2U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_fr&type=PROGRAM&Expires=1477300874&Signature=gcayxvSWyIdZhaVtp6lHoepnmHr2VUWO6w6~MAwCOl7eHHbzZwwHc4YJZZi6uo7nfsjJuFzSOjmv-5il4U3AhyeaON~0QKguZEWoafbVANETROKNcd2lOS-fq4DaQ6B8Ccf~YXReiwp-Z5alDQD-5uxNstZg4~1rh8TMZlf~Ebs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_fr&type=PROGRAM&Expires=1478148377&Signature=QZQwvkMVsk-kJUTzGBak-0QR9SwvtZB4RReSCxJ7-bmJSwoO9oWZ-MYedolsQWqIvF2kVwK7UJ7pKYov1WdsfqtsqJ229-E7y623DXn8ZKTww38WVRPyc-4DtDWBYW1ZA5bXdLUP4zFmVnBaZBkDK8gWr6fcaHcPjO9JUz23G5A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_it&type=PROGRAM&Expires=1457239516&Signature=BaRSirhVIN0Odz9I4d~giI6xN7NWy-m15s5KyLiyJ46sWBfElyvEG2itcZYPatSDQ3kimc~p4gy6hOte9ug300nnz7Xw9BN4b6-qa7-V4y3RiyVfLB-Sz~cN9i7VieSov9JG0UTNCQ8AkZLYh5aj1ZHGGsx2buGFXbZenWEIDZM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://www.tamindir.com/indir/MjAxNC0wMi0xOSAxMzowOToxNw==/icq/.../8.2.6893

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_de&type=PROGRAM&Expires=1436077095&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HTRJvmwxKk-ryJhJFKgovZB1BegtmCgHUBgKtIAnKAsJ14kBv0Zk~qe9bzaCpHiajGHYipUZqD5Xi01WBJm-20C~UIANH6pkCjHt9PBqOfnenK870aaNu~LzKtY6LIshZuaAbbgoZkcn7Ye-gRFYt~ZYxK4s204hTdca7iaxUpQ_&filename=icq_rfrset.exe

http://download.besplatnyeprogrammy.ru/ICQ_Rus_Setup.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_fr&type=PROGRAM&Expires=1461040039&Signature=ONWCVNn9IU7STV0IMIFo~lU6OaTruiSF1sVFN75R7GxYEwMbolE7Djap87fX~mKkXPxuWgjBDrURt5Kk7uS25Ol8FtEtjY-0O1Vxz6SG5fkkDmSm8JYlJpIs9BZlBdzhbj6wRYoBGS2AH2cMJaX5ctjk5qyL0GKimgm6RFHVsck_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://dla.uloz.to/Ps;Hs;fid=46441205;cid=1100586212;rid=1463226820;up=0;uip=77.104.195.52;tm=1460373680;ut=f;aff=uloz.to;did=uloz-to;He;ch=72e9bb08b908e088761c4784d59e8852;Pe/.../icq-8-2-6893-cz-exe?bD&c=1100586212&De

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_pl&type=PROGRAM&Expires=1459219912&Signature=FZKXNX4aFkkGqwdhC8an3vzJYPMqwEX9yKzGaA06mueEYXskAJfepXmSH7C74YNncSIyMRU7nIGFgYODmQUXuLDKj2RjfHbU3iT-d2BhZAwUpHKl9k6oAhO1-2Dibhn~~QIx-siOrIdAryRFBRr6jGs4quYSeAzAu8iyF7Tjn-k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_fr&type=PROGRAM&Expires=1463894529&Signature=Nb4h0I8eNR9cTuvPU3V4KE3hxVD4yWpVF98yDj2f3GdtopghjS1tsvk2s5yCRYokG6K2KDxIjSSl2HB8lkrUpbGp-ei6~DGNZFk0XiwtR03qkMDk7h~q80bNCDXzWs5K-Af-OjOfr5oKW9JA-JBEbzr6tgEceVbp2q3p-KOOLVU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_es&type=PROGRAM&Expires=1454765145&Signature=FFTd9MK3Bk0nlZiOE1uN7IGEgI4Li8ps7SwQ9wHn4590598SW1QkwrFnRP8GfD4HlTmT9h5mzzEd8GjJEeiMmsEikBA8XjcUCw8CUqqe7H-jj8PtUrr63CU~nzGu5cOZp~UlAHifeXuOSbhltWBcdv5wTUHXVHqvQ44rz06zB7c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_fr&type=PROGRAM&Expires=1462607310&Signature=gLqCYYWrbaKucJXJAjNsQoR6GORYhSY4XF-159BaDQjfTfmgUqN247kVvbAjW3fI-0mM8v5iLvQHD15JbsH9EvkHJ8v~AXuYHi~9TmwyH1NJokLsvQx4Ov4s8L8vOwal83gdC61ks30lJj4neZkGVa-7ZvP8aX0fRYbRNo6Gl0E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_es&type=PROGRAM&Expires=1443840865&Signature=BLw5rL0MIhjpeJ59FJi49TBYLD-7R9mO0AICPlw68mm8MLuJx2ipsrqQutMf3QJT1cFqeEzI~-e42e0QrbiyhW~spp7ICcw7lBDAq6Ewv26InTQz7DKN95mkKhg8Dw~iFOxA~7QPt1TMbZ0~gpkRgWvVgvPLdxd2t6hAqRR20YM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

http://gsf-cf.softonic.com/a8e/419/.../file?SD_used=0&channel=WEB&fdh=no&id_file=37942&instance=softonic_fr&type=PROGRAM&Expires=1449058684&Signature=YLEgKKnG~C05zkrotN9geOmNsm2G1e3G18YB1qZPOks15aTEQQweLVjme3FuwReG21kfe64AV7wxUocZfs0KWQBwXPZke6hha0Sm~Bo0Tz3sOe9ubJfzFUxCZ7RTDa7pUwWUEuVAe2jGpOifR6SkRDT9vMypq6IoSVk522h0l0o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=icq_rfrset.exe

https://docs.google.com/uc?export=download&confirm=nBjF&id=0B64GegamV8aSZm8wak5HMDg5dkU

http://download.informer.com/.../icq_rfrset.exe

http://download.informer.com/.../icq_rfrset.exe

http://download.informer.com/.../icq_rfrset.exe

http://icq.software.informer.com/.../

http://wa.proxfree.com/.../ULoyc8OsNHhJD9mWxU7xSQ5sKwpFO697SlRtdc40bEqC PE0q0r0g==&sa=df16cbc&bit=1&fl=norefer&ip=US-NY2

http://wa.proxfree.com/.../gyZ2yJPnBpp6lPcZghQSfnYIzJKJOXNPSegLr2awg==&sa=df16cbc&bit=1&ip=US-NY2

http://ftp-stahuj.centrum.cz/dl/c14d721b415d1196d1859e35419302cf/52f7c293/stahuj/download/software/secured/i/icq/.../icq_rfrset.exe

http://exe.icq.com/icq_rfrset_puls4.exe

http://exe.icq.com/icq_rfrpuls4.exe

http://exe.icq.com/icq_rfrset_ICQ7install_icq7.exe

http://exe.icq.com/icq_rfrICQ7install_icq7.exe

Latest 30 of 33 download URLs

Scan icqsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.