octodad [v1.1.0].exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
587425b0dec0fca038c52c46a825961c

SHA-1:
edddb8c8618de36ddd4cc0e60478be4c933fe1f7

SHA-256:
03361ff9ea273a8a4e3c4ab71131d6b72b3be7a15c4c6b754fcf19db4e6fa989

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/15/2025 8:23:30 PM UTC  (today)

File size:
337.2 MB (353,561,333 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\huge collection of freeware indie games\octodad [v1.1.0].exe

File PE Metadata
Compilation timestamp:
4/10/2010 7:19:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6291456:ukv453xU8tm/ryIGktvfrbi9nPgvIE46IvKvKiVX0aP8aIOd9hLr:LCU8tGGQT5IE46IvkVkaUynr

Entry address:
0x33E9

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 78, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, 90, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, 80, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
8.0000

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file octodad [v1.1.0].exe has been seen being distributed by the following 31 URLs.

http://gsf-cf.softonic.com/edd/db8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=301720&instance=softonic_es&type=PROGRAM&Expires=1436506061&Signature=U77VbrrHYeApTcH4cIuFBiElzApGny1Mxa2opbGgafiQU7RN2lnJNqghu51ZXQtUuzqiyQosMxfb1ahM3czJrwndx~9-IziTSu2pMERXq~yJLsVcUEAlD0ww69-Aiu-7KnupfQIhGaqLi1HM-IrdkpUzfU6gpwjBA8zSRefAMl4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OctodadV1.1.0.exe

http://gsf-cf.softonic.com/edd/db8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=301720&instance=softonic_es&type=PROGRAM&Expires=1470094930&Signature=hC5K-1NuyA0F4OjFncnAVovOI7QiKnkxVZsDHbM5ExFHCzqaEckVMcK7vnczbc1ulgZgKryLBG8~fqo-QcRNogHZjYHN4TJVEk6FADuR3cpGVLjoERNBOCvqs8I9GO9CLyN9Vs1wstJkP2qAvlsSNlWvBIAm4VEQl4pmLXVtxYM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OctodadV1.1.0.exe

http://gsf-cf.softonic.com/edd/db8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=301720&instance=softonic_es&type=PROGRAM&Expires=1456917243&Signature=SU8E8gwBPEuvgt548D6UbtZV4GMdxQGowAW-Q9mknuaovP9qMn2VluHDeKwN3JKpV7cpaCA-tjRdLy4Y5WGwxagKuYbG4fLTxGZvNsPD9R-5VHFe-z88-rxrEjEZHqmnVM72ASjyzu4YZ8FqZVndKq6bYkvAm0Xq65oRppH-8oQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OctodadV1.1.0.exe

http://gsf-cf.softonic.com/edd/db8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=301720&instance=softonic_es&type=PROGRAM&Expires=1460110710&Signature=aWmHZfkWzXAClXmVCIWxS-gQLpUStpkhBmUTFN3eUFEoGtOdEkCaT-hCZ6biEtsr6m~Wp08CHOJQxfzDlHv42pVlsWXWM-Fiwx8OSfF-Jhy4onFVSft3d3PJLtLPzACbg2AfRfBaCiZljsZmmAV4gtSty5SxelZcwmxGEKLmE-A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OctodadV1.1.0.exe

http://gsf-cf.softonic.com/edd/db8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=301720&instance=softonic_es&type=PROGRAM&Expires=1438324936&Signature=Jdwyki6FUKT5WqV2aVOnp9oblT6-D2wKhYxEaWHF2Ns~7BFaBPgg6IXr6hW3Thn8NGlH1CR2A1zNfR9ReOYuoFH6TezlfFEYrDRzyUw7bU-49VE3hNdzau5YsYP4Ddf~W-dvdnxuGq9TjFfnbI7XezKkKVzOZyVde7sSO9kjWms_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OctodadV1.1.0.exe

http://gsf-cf.softonic.com/edd/db8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=301720&instance=softonic_es&type=PROGRAM&Expires=1478331668&Signature=M3e-az4fjjK2iCN1SelFUR76kDXNIWeQEJbZ7uNkry87sx6ypBr9L60Vlbn9lLU1oJwPZNwfVvQ5uV3a~WCvxc5rBeWQA6Gm7L4qBEeZNqobNpPdCJ7qNARdRKoTnAbqysl3n3vDSR9rI7401wOtt6~N3p9hvJmcCEW~PW9t8Bs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OctodadV1.1.0.exe

http://ultradownloads.com.br/.../2,974741.html

http://gsf-cf.softonic.com/edd/db8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=301720&instance=softonic_es&type=PROGRAM&Expires=1451443446&Signature=fKY7ma1FomRMqAc7hwm6QdLXXCI742IjMYuPyzO847em-d4sKl~e0FIAWqi42cmf4uZOfwd0YOXSEDj2aMvJ0b1jTWOLhlu3pql7BbgzfokSKKFgMVlptQ-YRgRVq-64OgSaH9t~7Ib~gLMDCzMsWflKkTL8DOyqPMhx4MeDORQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OctodadV1.1.0.exe

http://www.bitstagcontent.com/DPIr5fVmO1nzSBq9IRM0zk3kR10ZbHub_4OcHifoEZcrLAMNtA0FOYAqRVvRg6wC2DffxuCxBjRB8aHgPBtXzGOJ4dJfg6AR5_M8ZqIQR81o9zj1aVzoaECqZ8qWlz6Ym7QLtwmdoy3sGBl3 _IHiNGlGS44fQ2gnVPOzsn9bc6D6MeZ9TZVxEzChkNwSEzSg0fPRF_M-GzYAAETnFhOHA6Xb7E7IBg12IYZMIpG sA3EjRUlrJH4V8MzXMd p1ZNgjD0bw==

Latest 30 of 31 download URLs

Scan octodad [v1.1.0].exe - Powered by Reason Core Security