home

outlookout.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
10660d97db7550947cf4861d6819e41e

SHA-1:
babb11ac62bc24dfc3d7f75a423d08740cdcee58

SHA-256:
ea956a09525b014c10e82a9a928ab34af8ad05ee67ac0b2d717fe5516f4f2bbc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:15:26 AM UTC  (today)

File size:
28 KB (28,672 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\outlookout.exe

File PE Metadata
Compilation timestamp:
5/31/2001 6:39:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:ezGx7bsMmBB7aX5mlAEMNjyyRsD4rh6oZ1:r7beK7ycsDeh6oL

Entry address:
0x1530

Entry point:
55, 8B, EC, 6A, FF, 68, F0, 40, 40, 00, 68, 64, 20, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 60, 40, 40, 00, 33, D2, 8A, D4, 89, 15, AC, 55, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, A8, 55, 40, 00, C1, E1, 08, 03, CA, 89, 0D, A4, 55, 40, 00, C1, E8, 10, A3, A0, 55, 40, 00, 33, F6, 56, E8, A1, 09, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, E1, 07, 00, 00, FF, 15, 5C, 40, 40, 00, A3, 98, 5A, 40, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
12 KB (12,288 bytes)

The file outlookout.exe has been seen being distributed by the following 14 URLs.

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1421730181&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=L8D8bHcILLRn2talsMRPGL0AvGoKfohf-bTh94pCBkIgq7QVmSlrPz-d4QZyQAQYS8n6zTssqjlObHRszMtXvYLjmcGcduZ67uQswrprKwE7APOHDlUKWLDlDGKzAKnfwh79MRFkrxCdqs~lbvQKGJd3nrWcBebynuAvfqvAs6w_&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1475720058&Signature=LLCqeHDZ7DxI4TQg7vGq-eLHpXJi-hu4EucEFg067SqVGwjCxmWPaPOJoPdO8-CHuHvzGXbc2S3cNM2UwjZsqQdjGi1etKs1i9at6lNGx7alJQqVpqDCctlE3npXpWULt9jWa3fv0cKLBsO1hKzrXMobvb-f1dXY0VHAHyn5Yj8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1470458513&Signature=GcNchcixWiaXkIMKEwqC1M-asYbKCX8P9nTBd4-lrkAFDC4vTxAt3G0WWTNLn7rS8b3-t6G5LzvAU~wLji5wOzycW3qVAtPIexxl7rwWrpyHKZTp1QU5yra7x0tTxkBuMVuiakYZau~S57tIFgXiqv-35AuvkP8iTgZdSwsRyvk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1442478249&Signature=Y2o9eo~ZO0ZRnZ0UCfJOIbb7ElPez4Wz0-Fu5XC0jfLgICE0TRK6ODVJU2MaTBzyOM9ubsjlnxbdV~pF3VXKVKT0dR~jJ5h~V-UlRmKXz7vBJBzsso-1dDk6xP6DAlMK96W0Q3IyiJpelkfkRomKUwc-EtKGUUYCGswi23tNJmg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1424484036&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=DTMMwgjLwtePjWilw8z8rvdXOtLbYw38IawyDWNtZkW~mOoPakMOE3f2gblfEicdSqx5wEm5pGA2VQq000UgBcs3ORgZYKHx6cQc6~nADDt0wh3oDe0qXZVfdm6VmxgpaFK~GDybL2hVBqopI4SVnQawHNGc1llABnn0ue-sW0s_&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1462433842&Signature=bhVZAWJGKaFrvhXzWyAXO1KUfBFKV5TQXjiUKfzW8hocJn74Ih1xUWPK~bhITuUMqzkPbvPnW02AsOhGZ2knU8EOcvbYr0H3UU6pvT-c~8kgpxA9NfUfrMY3QWEIOWeUUma3HJgZLuHyRIiN2zyR~tJfhQMDfKwiVeaTYp35HQY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1435973725&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ZZ29Bisa0ZgnuegkkXPglDeTUN9UdfG5DrJjvPVvLFTO9nJKOOhw9PlC9TqtSyPPqAsQxB7B6sbazGzZBlR~GLqJAIt7oc3OCeq97Lk45emZK~-iYqQeeNAkQwGB8tkk-9-bSwkZzyUHnLN4iGoEl0fhlYVtZNXANXw8Nt9X92w_&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1459470140&Signature=WWmSngobFGnUzbSC7PjIugAhTyJY~Ofn8hI6RPBQyJRtHAC8vsLD2BXBSOYD4RbY7FFSYnTkGsJaRYGT2-PzbgtWx0ur6oecWK-y1qjuLYKctynbySuIHpmf6HkQrIa~Snd80QMB28iSDaJlAc8Hd00oRXJA7gYteSrJ9enKNuU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1459859659&Signature=GoGLqY-dts80iACjK-sV1GMW26n1kdbkxolFgHEh8EvcIAsijZj3xZg3JVhxJXVq6uTumsVGK41LT9OL0TsZefJiiVfB753QDAnWC-VSoQH8tPVJZFjq61axLILtEouO4LBGwPwEl95jusVyby8MTcNLc-HqTcOMGB0-b9T7GQM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1429745193&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=If-K8cbK3phk69Dk575WEjgOdXo11BUr0~1f6dxUMHqfmMXsdJhGBRfKJreumZWB7qxFSIWH31JXtqr-CmdEAI5EgYsCoisyaC4meU3S5UY~hcUyIv2RtblMWI4Vz-up8pk0nhVQYczFjM65rIxDuZLEIAfqY0BsW~Y8fkIh-RM_&filename=OutlookOut.exe

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1433210681&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=bJGYPnqMtwSEG-tLsseSfbGFApfRhKtqr8Ece8zC7qWdbdIFyUFWwICzENxVnVCJwSJV~HxbrBOM2od~Ke720Cun-w5ukpdYqpdKWzcOT9SbkvHjCs02iCLwBSnAH1UsoQEQhyK4kXd7poxyEsbEIKcpMlQrZjFlXxrF7DzE5Tc_&filename=OutlookOut.exe

http://outlook-out.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../w1OQ7eRt1YSbVS4nTeGEimHRlSpeHu2ud73ZkVkklmpuFlJIWzuSKuufKOgVHfWHACU=

http://gsf-cf.softonic.com/bab/b11/.../file?SD_used=0&channel=WEB&fdh=no&id_file=18473&instance=softonic_es&type=PROGRAM&Expires=1454249704&Signature=Rji6hrQ51MjeF6~6Kd0HuTQ1AEqkWB1Ys1ebjnc8AK~VMt3OFw8OHEHtLqOTCCRjSng3TTlJg6Hul1FK73m9tEdtzRW7LzEowDR16Jqit9OdesFblnkP1CW9i~rHxsVw7cM1gMVz5TwKqUePOUSl8YV2vaMQ4HL9nw7DTvq~J20_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OutlookOut.exe

http://karontek.com/.../OutlookOut.exe

Scan outlookout.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.