home

pc-wizard_2010.1.94-setup.exe

PC Wizard 2010

Laurent KUTIL & Franck DELATTRE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Laurent KUTIL & Franck DELATTRE

Product:
PC Wizard 2010

Description:
PC Wizard 2010 Setup

Version:
2010.1.94

MD5:
2ed5155543bba196f94d49016a7f2fc9

SHA-1:
da6c33f52b033c18868fb6d20119748d92ec8bc7

SHA-256:
2294f8995787ad69b24b40dd7c7f5ec46ec7c73619d054ed253bc3322fd61e87

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/16/2024 2:59:26 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
8.9782

File size:
5.2 MB (5,429,551 bytes)

Product version:
2010.1.94

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\pc-wizard_2010.1.94-setup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:xb0pXbSGeMWT954F7T8qyC0SEQmn9UDn3E3/kaBEjf7iB656YYmQhmSjcc5TcLZD:9WXWGeMW5CmqP0sW9eE3lE6B656gQkKS

Entry address:
0x9B60

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, F0, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, F0, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pc-wizard_2010.1.94-setup.exe has been seen being distributed by the following 9 URLs.

http://gsf-cf.softonic.com/da6/c33/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_br&type=PROGRAM&Expires=1480406104&Signature=H0~tqM1wo1WYbxWumzauyQy6cG71KjY4bJtYqJI0vKYRm1S4ljNwKzyJdZispHgKZ1lRYLFzXcW9i5N7vpPyB5Va9x3EjvbIxl7D0IWXAlOFUt07eG78qFhKEbilWVJoyc6lRwQxUxYG2MumDTOWtpQI~~uOO3~EUrVKleVkTKQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.94-setup.exe

http://gsf-cf.softonic.com/da6/c33/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_br&type=PROGRAM&Expires=1443428423&Signature=Nbzz37t9hQSHNpB4POSUV3RMn6NtfJ~G27qSbSuoqtem8TFlKtfgN2kt1ZfYRewL3Vo9z89U1ENLb1d1rc3LcZt5K5OJYvFf4og4fDJI-BFgk0ayjdLJRxvwqdemOposOj8taT8XaPsoIQNhXlIwRhofawsN8zFg82v3zrSakrI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.94-setup.exe

http://gsf-cf.softonic.com/da6/c33/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_br&type=PROGRAM&Expires=1476669578&Signature=eOxhiHVlI8ux1hYp~hBl3XtqVEIHkeOXYDSkINrUmLJ28pVYRMUegYRPHgyCbq996ecpt2mLotnvUgHKTNjs0VTmZ1vDgPijpcM44kLpJJC~7WB4gr3V6pnkT~fXKI4mnjJRfUxv5Q1Hpkqx7WgplzLPRzTxgbz5Zp81pKiJ6O4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.94-setup.exe

http://gsf-cf.softonic.com/da6/c33/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_br&type=PROGRAM&Expires=1478336638&Signature=G2wArkLdCe70hsk0JhGfm10ubQ8acapX4n2sCcdk577-LMbvCYpXaKXLX7ZlMg6xT01~n9zuWqSg3~S670M4yP0DoiE9NOaeDrXaGGzkTT3pIsCOjTmYVQIJC0PEywbn~u~ri2S59agUeAXoRZpmFCid17q0oELuq7xLSOvP0-A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.94-setup.exe

http://gsf-cf.softonic.com/da6/c33/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_br&type=PROGRAM&Expires=1468049118&Signature=A6kpveckAiKp-PdqG4xfGYjofPNLwE00oNo8Le6cWRhICjLsvv06Uf1gdwJAjzIBPkccfEpbN4aQ7~ZBVt0hypj93D-kh81Nm7K0ws0Js~cTKS8sfVP1wmSEVMkqZLmxgXOwEDvMF3xD1qw1T~CwBWTzZSIgC7kxW2BkXxghASo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.94-setup.exe

http://download.uol.com.br/downloads/.../pcw2010_v194.exe

http://gsf-cf.softonic.com/da6/c33/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_br&type=PROGRAM&Expires=1457930088&Signature=gN5UfVzwqhm59iYUHCDdNj~J8lQatuP6Fct141YVRzB3Ni72PNcBknicHS7JDg6b-goiKzoqTpJK-Zc2pAizcxjYN-~iC0eRpnSxdNmO8osK7V~~H0LJSLFHRcjYgp8lXdyybgWW2esZmfOQtJNpPaxgpOUw~iJertEsMKbGT54_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.94-setup.exe

http://gsf-cf.softonic.com/da6/c33/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_br&type=PROGRAM&Expires=1448961129&Signature=Jrf5alix6guUCDZSQ8-Zp18JWQTUlpbdjDTzbBusekfZOornVxokzfIKVCd9IOVEAWhaK9mZxHIVy2ZzWr722Wgdd4tnlD0oIuo4ji0eJtbj9Wtga2l42iem2DYpGKZ6qai-1LyRPhjQlhENTjLySV2az1O5P3fjZM2hlEiSG4k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.94-setup.exe

http://gsf-cf.softonic.com/da6/c33/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31357&instance=softonic_pl&type=PROGRAM&Expires=1447840614&Signature=Np58NHgU23Wg8DvEByuP2gcuPnWH2BVZ6spJBy3i37E15foW2B6h5aAihmdVyaOOInMX3oQq5ioLgFgSZzW~wwzime6w5GwCX~BOtzBRWFTHpmAqJCPFvdqhHqfs9NhxS6uG3MMeg3dzRUgpG9IjtgVCO8PRsIVF4GKvNhQY9kI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-wizard_2010.1.94-setup.exe

Scan pc-wizard_2010.1.94-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.