paint.net.3.5.10.install.exe

Paint.NET Setup

dotPDN LLC

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
dotPDN LLC  (signed and verified)

Product:
Paint.NET Setup

Description:
Installs Paint.NET.

Version:
3.510.0.0

MD5:
f99913fae03422ad629320182c3fa39c

SHA-1:
7c5db497267ade43f28cf9f81d6a8232123611cf

SHA-256:
729c16a7eb79ecc7879e041142e3abaf0553caa119a06affebc2b72fe38f590a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/12/2017 5:41:54 AM UTC  (today)

File size:
3.6 MB (3,756,544 bytes)

Product version:
3.510.0.0

Copyright:
Copyright © 2011 dotPDN LLC, Rick Brewster, and contributors. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\paint.net.3.5.10.install.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
8/16/2011 2:00:00 AM

Valid to:
8/16/2014 1:59:59 AM

Subject:
CN=dotPDN LLC, O=dotPDN LLC, STREET=1780 Barnes Blvd. S.W. Bldg. G, L=Tumwater, S=WA, PostalCode=98512-0410, C=US

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2022DC51578A613F1964B13F01AB9CEA

File PE Metadata
Compilation timestamp:
6/6/2009 11:41:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:DaQsrDUonVF1Nm1Fdu+rXGtBgeDHO3jrAFw8c:DjsrDznV/k1ObtmWunSc

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file paint.net.3.5.10.install.exe has been discovered within the following programs.

CutePDF Writer 3.0  by CutePDF.com
Publisher's description - “Portable Document Format (PDF) is the de facto standard for the secure and reliable distribution and exchange of electronic documents and forms around the world. CutePDF Writer (formerly CutePDF Printer) is the free version of commercial PDF creation software.”
6% remove it
Fraps  by Beepa Pty Ltd
Publisher's description - “Fraps is a universal Windows application that can be used with games using DirectX or OpenGL graphic technology. Show how many Frames Per Second (FPS) you are getting in a corner of your screen. Perform custom benchmarks and measure the frame rate between any two points.”
8% remove it
 
Powered by Should I Remove It?

The file paint.net.3.5.10.install.exe has been seen being distributed by the following 28 URLs.

http://filehippo.com/it/download/file/.../

temp:Paint.NET.3.5.10.Install.exe

http://filehippo.com/download/file/.../

http://fs35.filehippo.com/6825/.../Paint.NET.3.5.10.Install.exe

http://s8421.chomikuj.pl/File.aspx?e=pnWjJ4HYlyArpE29zdJGZx1csiPlM-_RpgQJMuOkMCRXNEuNvj5drRvy8HJZD17SbOuCpijdL5SDbFbdpfgqG4SZXBzKxSdYh-V6i4SeD86kYR5BHROH1But7AvgYizXhWxt0YkcQEfsGucq8qtatpyxjY5wmX5rASA75HL2wOE&pv=2

http://download1607.mediafire.com/8650c5ej0qng/.../Paint.NET.3.5.10.Install.exe

http://download1607.mediafire.com/r8r0453t895g/.../Paint.NET.3.5.10.Install.exe

http://s10396.chomikuj.pl/File.aspx?e=pnWjJ4HYlyArpE29zdJGZwZuHJHH7ZFEYC_UJbmS0LkP1mfzbfBeFyNy1Cg8XEqhgLleRqVGMtUbwjeswTaeLMwJ2cVaXCTHUu3pG-ALcFuiZ0Gr96mz45OI6AFOmcoMwkrdJE7DI4vmDKAZ_ixX1ud5CI9Qm6r2LcIHUqbunm0&pv=2

http://1.csillagpor.hu/paint_net_install.exe

http://www.filehippo.com/download/file/.../

http://dla.uloz.to/Ps;Hs;fid=18383856;cid=758624097;rid=1544061492;up=0;uip=213.151.215.195;tm=1469095123;ut=f;aff=ulozto.cz;did=ulozto-cz;He;ch=41b20e8cb0be847e908d9c0e9c9f1c21;Pe/.../paint-net-3-5-10-install-exe?bD&c=758624097&De

http://download1607.mediafire.com/e4jxa51ydkig/.../Paint.NET.3.5.10.Install.exe

http://download1255.mediafire.com/b3n5r9dqc8sg/.../Paint.NET.3.5.10.Install.exe

Scan paint.net.3.5.10.install.exe - Powered by Reason Core Security