home

idps_lite.exe

KC Softwares IDPhotoStudio

KC Softwares

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
KC Softwares   (signed by KC Softwares)

Product:
KC Softwares IDPhotoStudio

Description:
KC Softwares IDPhotoStudio Setup

Version:
2.13.11.48

MD5:
bc36a13d9f72e6367e99a531d108e401

SHA-1:
3b7703b50401fd69928e08b90b89a0311f6bae9f

SHA-256:
e10915317e69db7c015c07ce59fe9c833e2f6af13fba18912039e8ddd2e7731a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:12:32 AM UTC  (today)

File size:
1.3 MB (1,409,008 bytes)

Product version:
2.13.11.48

Copyright:
Copyright © 1998-2015 KC Softwares

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\idps_lite.exe

Digital Signature
Signed by:
KC Softwares

Authority:
COMODO CA Limited

Valid from:
5/5/2015 5:30:00 AM

Valid to:
5/5/2018 5:29:59 AM

Subject:
CN=KC Softwares, OU=KC Softwares, O=KC Softwares, STREET=chemin de traverse du Bouet, L=Auterive, S=Outside United States, PostalCode=31190, C=FR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
12A9F5D7A3247BAD09F6DCFF84BA497C

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:U7blCAvaxSUn74jMng0qhjHb0fNYIBAxjWUPfA8o0JA2Hmi1YWYSCIpu:U75zvmbn74opk7WzAxjLA8TAFNiu

Entry address:
0xAA98

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 2E, 86, FF, FF, E8, 35, 98, FF, FF, E8, 9C, 9B, FF, FF, E8, B7, 9F, FF, FF, E8, 56, BF, FF, FF, E8, ED, E8, FF, FF, E8, 54, EA, FF, FF, 33, C0, 55, 68, 69, B1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 32, B1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, D0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, C2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, 24, 93, FF, FF, 8D, 55, F0, 33, C0, E8, 66, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9732

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
40.5 KB (41,472 bytes)

The file idps_lite.exe has been seen being distributed by the following 13 URLs.

https://dw.uptodown.com/dwn/b-XXcaHWYJUpQR8DGdnwDejRQXsbO34QMV2GLTuTlt3FBYJv3sq-xavfsT18VOCfQVdKGCetLXtKAAh9A6uOWNGFOKPgR3z1B7ch1xP7JG-26fwYNTgvAr4MoYA1wk22/gzYDXR_V3NDogFRFPh87P6fiuz7iClc5Icb71dyPoa3K5Thjfz3ysIbHtKp5muTCcieN5gfXG2JFXYnjGQvq2Ggfr4DUQ89xeKaIJUseYiedvs0kgO22QmTXGlzeVV44/dvlM-PX46UxtT1mCChuh5m0vpsLtI0veNUSoS1fb5tlNuDU1vrivv7neRr5jqN4ykrgar8vv19S2OrsdVJdpp4SLhqlrOxd3HT4ry7tZosJ7MBVsRSQusFEIC9e_c7E3/.../

http://idphotostudio.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOLABCJUHMcXeByXKvHXUR6qKdc0V0C1jtNrWBmTxvP/SSW6jEFjVkJ1I88/5cK1WGKG3ska BJQ81nBAN2gGFF5jnTWbaXVPNUR192y/7xhJ/.../QRyfTSqwvc6PQ=

http://idphotostudio.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtAJKug4ApNfQLscYPFtCg 8 01mUIxRaDavqmSwSp0ILs5qP8Y2EtAExGTGUYSFDTq7O/.../nAd8QAUQ6gFh0=

http://idphotostudio.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOLABCJUHMcXeByXKvHXUR6qKdc0V0C1jtNrWBmTxvP/SSW6jEFjVkJ1I88/5cK1WGKG3ska BJQ81nBAN2gGFF5jnTWbaXVPNUR192y/7xhJ/.../QRyfTSqwvc6PQ=

http://dw.uptodown.com/dwn/wYxCqm-3k7quYyizjxMSDpizw31AZLbCSiuEwR-7u4n7l0krrSxEjWl6xzEobnNlc4QhaITod9mfSUb88FyuqwSuKTYhwq3A939blxujh9guyQsEzCZ6QLLDfh_SADck/JHFARwU_oWJYIf8Qq0i7nbhczdzone4Lt_xUxr4SQyXS-H_C7IQpYfWOhhnJVvSf7sPltW08jmmUbk9zFH-nVLCleutVEkApN0WOBQH8GRSLWFFsv2BWvNTcLHARESrJ/.../

https://dw.uptodown.com/dwn/a-Bt2Wej3u5JB_ToqDKIpYKQcpKjShqaocPUeg1PaJ6eDFmcp46MJu64BExWoSboypq0-qkzQ6-UuvNfCmVR0UTOhcknzvZ3yvrbUNOhHNuvAI5YEOeHI6a_G29PnDl8/2sxBOj35k9MnyRlUA6ldZLGbUh2fflLjZbLaHP_T9MJ7fllbQn1xLDgaxrvxiRiWfn28DcB9hpNlX8SaO-3l-2fVf022-Xwp9s3cAR8h0oHfSD4BlUVAqPnwrOqzEj4j/8wMSCzrusAJm9221-6drg5v6M6w76lIitzugIUyP6h0AlBB0sPe0by5JSUyJvVBt1xFdf-EkvGOWQ5eHJwbivqYcreuBoVN9BJy6wlKX4YCVZz24AFJIe80lLn5ELTFY/.../

http://www.programosy.pl/.../pobierz,idphotostudio,2.html

http://dw.uptodown.com/dwn/5ZonUl7aMZmqPj_GBVcxKk_5h5ShGvx7REF3eW-yk73GqMEJGGbG2lMPXzTFD2SggyQFENlX62zazWI12AGGKYOPBbWIoqEO71Ci28u3iO5LB8FwfSEzPyt_4DmIp48f/34LFC2kzBY_IMQgZg-e2AhDu-E8cxQUZzxPHz_Hm_rSDzPqBkSgsQdohtgtHqWdZnkEaKTxswgP_CoaFmxeyinmV75J8jOlktQEtA6Kzm5t5MYvWN30hgEsiZAt32dSw/.../

http://dw.uptodown.com/dwn/l6KSr2nYdQCav7yYASzFMrASveFvbwjEO2m0ie41zTs8TsVEJYLOggsa-UX1wvqBjh73AukmCRNW_H14AkONyOPorhdv3-Xng5BkGMA9miNbEt0AcUIDzOdEYtAyeRqc/iYhsmdlnEUBGtLNpb4NfLnr0zDTgWUlBwqzicApxzgy2--y70VThEzNXZQrYXsAE9eoV0k8Sf8Pgruh8PmT84kRAnow2yt4AgT2niQf1nvZLj_IX47TK9nOSnQepp9qk/.../

http://dw.uptodown.com/dwn/9U4FIlPksizwNCVvo06XTmX2OhFGdAmwI_71O-wBnapgWMNEZN9WtA6I0a6n7bZjapmV4NQqGRhogtuUhh4UZ8qTHdkjaPjxYgQkvdoV65WBJqftm_tEbQwxGI39uFec/ip5nyKmgX5xKb3lsaxwGl4RoX1v-85Zrww172sWH8FHMC-PB9_Ko68y20z8k84Mki_Qbxzg-pMmATX8-CH25__aRroMmcnnvvv_xEYHKfmvFxHTheVMb5yX2PFDyUbPe/.../

http://idphotostudio.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOLABCJUHMcXeByXKvHXUR6qKdc0V0C1jtNrWBmTxvP/SSW6jEFjVkJ1I88/5cK1WGKG3ska BJQ81nBAN2gGFF5jnTWbaXVPNUR192y/7xhJ/.../QRyfTSqwvc6PQ=

http://gsf-cf.softonic.com/3b7/703/.../IDPS_lite.exe

http://www.kcsoftwares.com/.../IDPS_lite.exe

Scan idps_lite.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.