home

microsoft_research_autocollage.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

MD5:
71cd284fd2bfd27d8419ab3fa8f35482

SHA-1:
6b684a033164610693a9329445e07b0d24898117

SHA-256:
db45eb16a343fb8853ab00f17f9a11bbec7b1b7d7cb753f9a51408d09167adef

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 3:02:39 AM UTC  (today)

File size:
6.8 MB (7,171,072 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\microsoft_research_autocollage.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/23/2007 2:23:13 AM

Valid to:
2/23/2009 1:33:13 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
OS version:
588.0

OS bitness:
Win64

.NET CLR dependent:
Yes

CTPH (ssdeep):
196608:G5bSlLciwn1JR3ycAgYv+8v6fi9n9/JoguAGmq:q9XDRHAgYNZ03

Entry address:
0x246

Entry point:
D0, CF, 11, E0, A1, B1, 1A, E1, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3E, 00, 03, 00, FE, FF, 09, 00, 06, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 6E, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 10, 00, 00, 38, 00, 00, 00, 02, 00, 00, 00, C2, 12, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 6F, 00, 00, 00, 70, 00, 00, 00, 71, 00, 00, 00, 72, 00, 00, 00, 46, 02, 00, 00, 47, 02, 00, 00, 48, 02, 00, 00, 49, 02, 00, 00, 4A, 02, 00, 00, 4B, 02, 00, 00, 4C, 02, 00, 00, 4D, 02, 00, 00...
 
[+]

Code size:
112 Bytes (112 bytes)

The file microsoft_research_autocollage.exe has been seen being distributed by the following 35 URLs.

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1486201057&Signature=BFL1uJ3g~AbUlUP08CPHAbzukrWIHkFiF42wp~2kN5aJRANeJbkoitnuMIa-P3nq7kMwSsMaaFYE4gmVG23HS1ESy7mIkrLPnNRjCBsASCUH5GjolE2BO4DvIg~1eQjxYRHnaEUvLBr5APxK8VGlGhTjtkycGfqSBavmR35~no4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1480103410&Signature=HeyGCZw5ga0mvIJxzbquIo43M-c1avqAF5y5RSCjPVTIKf8Hn7rHaLzdUI4rlA8wbCoI9~0cf8RPaDiOZT7Iqi~xeTmoMBAQPJ7tpGWk-tna7VvU4UhpBq1uWFsvI-m8VAWR2qcf~gIyeveLOJ6sohE9~lvIpxCcDr4RicEUrRI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1470025162&Signature=K~7tq7vdD5Scu9xs077TkyaZuUoLUv7zWrPmcVGyxHVri3LiqOUhcYiZT6a3dEH-6mOm05nx7ixDnSMWpIgTGKJwg36xCV59JaDwBlw1cQVz8gy5YzJbpgeIdvvr-hkboCepInivv4oKwmtIVp9PFWqbQCHq3vQMzQ8JSNUxoFY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1445324541&Signature=VsDuVkrNDoWWROVZILQCgzAUjJoc4sYspGswb1RzLRWqMWEC6ZCkyLwLoxIi2xgq2-84X2I0WluTPzuz5FFk6lUWeLRW~tuBJ1DszqAf0p5bzXcqzr-Uf4fuZFzvtqGW9Ti24CPXVQszva3vjPRDvxEdbw3I48dT8G~BBpwMxAA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1440937072&Signature=PFjRpLlCMM3QeABCmNsFves8FgRpr2I3hpZlSeU3at3NSNfw~AQeiYLLAIpSrh3YWU3Pf-2cWUgBg6OTdoO2Zyd0mgE8P4qRqcbkxlQSdlGY9BLiIVLZBfSqfQ4Uy0k4kByqUcBa3KaM5nGTHarShna70HrtS5FaP0ZbXNz9rM0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1448957593&Signature=QlC9mKlaEHib95g0u~CgUo0D5czAu-7Ks7XOdiB0xpF88ebj8GM9jYrGIZLnbKSglBC1VT3ly5Q5zcuLvaRaBDBrKKmGFHtXD9XWKj9InnFaBzZSbh8lQPuiF42EwPaYvLEj2ywLqvFJ3Jf88-Yfmjfr1Zl9a4G06mdo~CD2TVk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1471471635&Signature=bp8755J2ADuNWIZ~WUgTZXg~n4YLd3mCEqWd-BziRqVimyetFoQdCzegJnmIkXOYP1nZiuSmhM7GRJ-HwPxmUTsicO~Ku-QN67DtpRzRHHNmKf5zOiYNtQeVbZ6RH3fO7hy0-NjwEVVtegY1~XxxJ0UTrOX9QHBrdubbYtmDxFY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1476363638&Signature=T1YapC7tyvt~7KoteKSwtr5nDgB7KDzL-GlAZ1WNzph4yo~cmIj~KR9R7R6cjr14BaKzKNn41M4dYOz9AwR1BJn4fc0HSBgd5zrRXN57isPs1kUjNrnJKwDclUwbK9Xdo1U~e~j3GJZ2fQBZkRCq5dihVgJy19H2HmK9fCV8vZI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1426015224&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fGcptIXHXAhyBZuz2eCMmms72hkYV7HQ7HRVBAchpUR4oED0PQPQJbTldkCXbcP-bero1wS96ZJCOCj-V9g3P10dpXVlLQxOfrLxSlnzOhTjv-GRltMTzhv82wIAMm68GQJuep6xlmtNp~GfERUaH2kKbttKCw5-hJeMQsy0EUU_&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1477405855&Signature=AS0YrWyZ1OhN3KuAIbwRv8gureYlenE-Zzg-hKATysD1r5rXQPBjXphTg9eMwv7CXOIKoOWWqFGlgH2Cx6M4i1UJe0fmBolSejAei6x9K6zDwVkED33NQSYeQGD47Q1abQCZ14IuitLKw2Wh0tuhIgA9hqnx2nD53nFNZMxVDmY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1470553895&Signature=iWwArBpy2OFaLY7Y7aXVE6VQlCSDfxAqB0nA7Qi7jI-q97Odyt791kv3szl5dyZRXpXzIXbOYTkZaxodAKa6NPnk-R1wGz7VTTv7opiyFGCXcH38VI15t4MmiswhP0UACLxiDYT1ZSDdZWcqAWYptRhdanhrKceyb52S1elI8Qc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1477856297&Signature=Zlyi-2FXAuniNBx9BiEAAgY91lvSMKbmr4lAXLWBGcysKkF1ABQyy81ohwsuuRZO6hMWodzSLb7lvtQ9hadsVCmhGkLKW0ys5gUIvE53Lm0tu4x~pSATZNKta3FZKoT-4YTKfpY6w2kBwBA2Ursuetbn7Khg1BZ5ezB4OLEkWvE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1453671131&Signature=eg475x19ZZGQW~6ToRAOC4AtL5RF8xUiPl1DXqS4sy5-LYdf8pN6YJQocqFcKqz4ykIzYeQdD3IwhL5byqFVIkUr~CODyjMtx2tBkemCtdswE6WrkNn0aVHeQny8pVkS~SmSN0dM350kt1vPdb57JlroQAk9z7ntlmPQ6eybX7o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1476401332&Signature=FhcXA4qvIc4WKqlnY8ADwrQfYYvXQgqYmHUBNY9DUdHJ3C3BwKrn7SJfKM-vEL3N92KlCPgo5roQ0Xy~-e6n28mvuZQsQwLokVTrmm8UIlm7vCFAl96ENNvwNjSuZ2Rs2Ig3ECcobBHNPkZuL332PA8PpdAJWmqQ0UMI7Z29GgI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1476048196&Signature=TjQO7pTl0YEF6zv4xzPiTVLmTTL8R-XfrYEluZIDDdwqCEbrNm4yN6EmIFRsYB7bJJt~5MG9XyFlmDmitiv5NM390XNFIjyDQ6g5b5AO4X7wm4vteDzqV0Ffru2gms0HLzD17wnvegQcjWsbItm4k9pxRpZw5KxUJ~V-w40YpkM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://lb.cdn.m6web.fr/d/c/a/ababa1d66ea419fc6a114732b426887a/577e5cc0/soft/.../autocollage_autocollage_1.0.2008.0716_anglais_257862.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1476815514&Signature=P~w9A78cJf~OXfX0~O6fvZIaEPQTaIBMLgR64OhFzYD9mcuIDf4WxhyE-ATN0Tc77YqSiERHBoHmhjNplpRqX~WK5G-T0uOPhQi0WQBDwGYMqr7w6lomgByrQqNA7Xg8Q79iEnME0bQqd~pQo08ktJJa72TyorqFKWtkOjeFN18_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1423370964&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=goLIxcFfHLCMzkgwjdN67N4CWVi~TmmLwcdSbo9PGjhqbY9vv7SRwH8oPOWeO4RLrF5h5RFuXYnAdxRbWYhTpqhzlqncJxK9W-sWt30tDREEuJAEFgk4ntifZK9LktWa9HXBUGCWWTjrWBKCrzc9SiZpP4uF5bxE-RqWMCxlJhE_&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_pl&type=PROGRAM&Expires=1460851511&Signature=YZy~rOIqij-dakBL2BeCSpFvbU0FDL9XJGSrV-fQ01F7VBa0iRLUXkuMyLmG4hs8SehVS4BfLvPMuJgZE6MMLHFMNzNbUkKInFyLDvNrI634Y6iylHeHhQYSR2cwqMdPpH3IcV7ZGLfVsSpd6D2BnqJAwGxYtAKC~EMGmo~0kJc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1443980917&Signature=My5Y~x2Z3W5vWp9-5UWRhsxM4oSQrE-~kGuNsQzl0z~5340eT1zujgB~2XSNj-UNA5qW2j6JzgVeRQ8ZZ9nSAodFQOfkciDu-Ncl5zg7J3guhP2kUSHdgXPH5C2enjgjPMHZeWsyv~ANYuFCPjYXmMTk4dvhxpzD-YEnBhLEFgs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_pl&type=PROGRAM&Expires=1447921963&Signature=ha7Z99Ox-zdmhWAyNbmsx0AKDKlwmUQUR5BHnsKq2joF0EgMaeTwRRZnchsIAtvaSssypJe7iqB2j9Bi1ZRl8bI9duHVxuvLuHU~4I5cDD3H6mMzv8tOlNqk92F-5Kpvo3kbIl1Wmpvk~3x0ixc1JVrMKMNSjjzmJ9ReQDjkDTk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1441931637&Signature=hCwfdI4~l6vTc1EJFYXNUabahuTdSoGJk3pzUl0lAX-vQmKePJLxkQFU5YA-Les8VtNoMEwXAAf1IqZme6T1H66KRpNZK9NFY3wUJmYP4jQHUGQLALlHd0H0psI-yhyM3Hjs1CmAHqz6x-QFUyHRwbsXZU2Nkw4oroYqYfkIT6o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1460975299&Signature=Z975UXvZe4TNgoU6jMgBHhxmCayHNjYzsmcAEchLeJu54wOEcb0tTYywe4GRc1fJUT-lIKvkUdv9PvnQpV6VORGBNgVuj0CyrpE6KPXsuSt6EgrdWZtC1EOaCcyZdIKk~9gneQfNTxJZIf2ny1B~6FtTnx~FMcIXNrFdTI5QOdQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1444840006&Signature=IcSxj99HmuYQJBGFaMmz0AeUPTMsPGfTY~oTbXk94BoL9RTqkqzkLIkkNOgIrzzYCMVjWDCrobNe1jS0ColBgD0rwxAAMyn0s46QfuLDkv4prkR1ceK5j2LJ2mC6qnUf85xkrYho2-FfimGPkPh~w~a8o4tPk7MyU--GAGU1OfE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1442334197&Signature=SMtTvtSRs6zY3OsPMgjqUyD636pNEx8RARGSTqddDsbUbVyohAkpj~v5sxpWhGXVxhW26wAvxDSwtMtXC0ZTUuS3UKXEBUxlHIVFZJN7~QlFSjFfz5NV79jWXZYpN~4gaYtw4p20MmyaeOuoXsc7gYcfZnBXpWgeP202kadmBP0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1448781982&Signature=Aq-zbB8Vd-Wm7ejUjABBjORwEfGs1RUw461hboSqxMa4jipKVr0IAPZ-gbeY7bM9gGKOFoLbXqdjdOHyl5nGM40PL71hIJOoLIafeyfKahq1p9MbSfa3cEskQrQifBNjvpJmP6~-t~beo~WuF1Ptb-9y6ZPQ8uLYO-ngefmRnSM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://my.downfiles.net/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_pl&type=PROGRAM&Expires=1430856791&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=KqWtwdskcDHI~TSl6wYtuAuaG1QvCwSpM5gk2FY4Wow54bQuEVc5xUszUla~GtL5QxjzH3HIqvaU9~mbSAh~MMBGXNT6~VI92RO~0i3i~8AUExjV2xUFBlUu-ojDPOgKPAKa5hwIYRl7Hb1dDyUMqiNbU3HRBFaEJFsCLe4tw8w_&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_pl&type=PROGRAM&Expires=1460605292&Signature=HarbPWS4zc3vZusXKBDpmbWL8HlXIpl88ZvlGSV4IAZJuQkS2HLs9ZUu2YwzXfCpo7fVifHHhvwxSrbdrPg8~LswhdLwjyMt4WmhmUi3g8Xalm4dUN135NOkqChU5N4S-3eHjRfxt550qaMh-0KJvEMmlTpfnYK~VavJIsHCDco_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_pl&type=PROGRAM&Expires=1457895350&Signature=GpFd~5~~Jx12nIyWn4H1xzwsq70ovWJZ9hfEqqAEJIvjVMXotFemb5xrqRzGgJ13aZxQ3jdmPd5W1xF44tj23lSBfg9AJajU~76jJXvDb6OMDDZIXjZPzxbuJD9X9QAP8bWnE-eAoHcRI8JKoJlFG803L9BIwoqvC0BPtFyF2QY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

http://gsf-cf.softonic.com/6b6/84a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73815&instance=softonic_en&type=PROGRAM&Expires=1448126885&Signature=A10ITqKn5PoplcskVtNh9eMZ2mGKdJmJiKrzJFgLMy~fbhZA8KYfbaWZj03OOXVDK~~f0mEXO69CZnmnnM9RTAEvBVV8G6yuhJaebN~vbqKjgZVBS3z2GVnyg6t9tOwTeWSaClYwrQvdxPCOiIRHR9FUz6dCaHzyAbM3NcHL~lY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=MicrosoftAutoCollageSetup.msi

Latest 30 of 35 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.