home

pidgin-2.10.7.exe

Pidgin

Daniel Atallah

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Daniel Atallah  (signed and verified)

Product:
Pidgin

Description:
Pidgin Installer

Version:
2.10.7

MD5:
8ca6952dc5aed9193f2d85ac633736b8

SHA-1:
45404539a375b57512036b7fab77d33ef4985a0b

SHA-256:
f5da372c4a620d6774d7fa4e6f3e9f0c2893793f61c89d411a464099d86e892c

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 9:23:37 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Win32.Generic.141A9A33!337287731
23.00.65.131223

File size:
9 MB (9,470,216 bytes)

Product version:
2.10.7

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\pidgin-2.10.7.exe

Digital Signature
Signed by:
Daniel Atallah

Authority:
StartCom Ltd.

Valid from:
9/19/2012 9:48:58 AM

Valid to:
9/20/2014 11:56:51 PM

Subject:
E=datallah@pidgin.im, CN=Daniel Atallah, L=Holland, S=Michigan, C=US, Description=FWg32Q3ZaA4V01lM

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
075E

File PE Metadata
Compilation timestamp:
12/5/2009 10:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:K6fSzKzZRfjVpoErQqvp/l8IGNDS8lJfWt2e7NVvC0KNEloh8:KhKlRfB0qROT9SAJuYeMK+e

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9994

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file pidgin-2.10.7.exe has been discovered within the following programs.

Pidgin  by Pidgin
Publisher's description - “Pidgin is a chat program which lets you log in to accounts on multiple chat networks simultaneously. This means that you can be chatting with friends on MSN, talking to a friend on Google Talk, and sitting in a Yahoo chat room all at the same time.”
sourceforge.net/projects/pidgin
1% remove it
 
Powered by Should I Remove It?

The file pidgin-2.10.7.exe has been seen being distributed by the following 28 URLs.

http://gsf-cf.softonic.com/454/045/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25635&instance=softonic_br&type=PROGRAM&Expires=1477025418&Signature=AgB~x22ilW0oZ6hnlIi-ngOWh5fAUvxxQI~xS7fpl1mB0juwsMVXVYY9QkbdC75zbdUwxooPMVx9oM6jJBEk4w4znznyG5uiJDlBc4YktzUkrDuznVwkMxmkyd-fOevg6g5wRSiHzSAzYtFbAWrSGFCH1SDH3~Td9k0NdRK6LOw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pidgin-2-10-7.exe

http://pidgin.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANuQlqo9r4vkHI6iLIuhAJNGh5g1/mY4UPrVVzv8/sWZzWoz9ZrJ7DxGHmtO9IApNEDdgO2ANuE5MXCkvn58Eeu0HF7zkktDi1Q29Gt3i aaUfEEOegDTt48zJlDIEClut4WP5VXbdAt4pm4hSHhkyXMPaNPD82 HPt AUeB1twTturTH8s5Fx1tNmxwbvPTIIKqWDBUv06PC7tn5mYUfuLcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlUS4kT1ztgHv6IaBZ5KpaueSuyernKqyps yAXmxch0nQz neSfwE3MMrr57Og4GDgxsaVK2Ma0FW6nBN9KYhoUuOUCXxPUZHPMSeuA65YW47pvTNTvB6cHnxTMo0bVYZH7xAdthFYuC3J6uNODnf/W7c1L/YU6EzKh/.../3ms6BFOS9oIcNJ6htl6nuR04lOcT4UdQvxADKMul4tNQdRR5VmKzZ6CTpZcqdcOpGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c4U5W6ENEOHKnfZAt7naNjwJ F1B122RQHImRQIq8Vun

http://gsf-cf.softonic.com/454/045/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25635&instance=softonic_en&type=PROGRAM&Expires=1460878164&Signature=WMuapwaVIcJUwTfWN6a~dx0bF9AR7~V3htK~BoWLLCTkuVIRZcoxU2~AStB4RsgECF~8btM4UhgruUn8P0ieKGrOkSgqOyOlAJZ5PuHHJMIDNj91y58g2e1YtpFRIiN0TPFubdb5tpg0yXPbp2sJFAYQr1dU3MsaoUtic7PK2YU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pidgin-2-10-7.exe

http://gsf-cf.softonic.com/454/045/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25635&instance=softonic_es&type=PROGRAM&Expires=1463651068&Signature=DdZ7A4vb4HCd~pVgEM8141oQq3TDqknVspvf~np9zqskQHuqDTxvh9qcaWqvDb7h4wJJufij~-xqDSvcyw1Oi-4i-Yc668g8nxywI5qDqdNhKbMhqtaZakPmM8uQNHtlb9e9AjOG54Sj1SGJNayClPXcz-JhHM6Ay8WQ7QAbD4M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pidgin-2-10-7.exe

http://gsf-cf.softonic.com/454/045/.../file?SD_used=0&channel=WEB&fdh=no&id_file=25635&instance=softonic_en&type=PROGRAM&Expires=1448489187&Signature=XLuGUjfY6s4JKCXfE0xd1eNYgnZzrY93QrQRQqYzJZZ--i2NoM7RvOHy~CV0bOWvbnC8P1hoLgVJf1QovNntyt3QRB0-g63wAP8Rla17ZACXbx0Ei2R1mdCJfdxbboFeoIWj2DQ0SvtItMqWlginfJisFuqYSrDIJ3xFYIlDPZM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pidgin-2-10-7.exe

http://pidgin.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvUmcildXM3f6LJ64QiXcxpq2E6YoTfwhWJsIvp93LDnhIpKEVpRYphHnLf9H2ndyyg8p01FBk5R9h27DnsCQRmmHSYELWe3rolXNpI5hN0bbWFIJ0x/g/5sPrh7CkifgVzk1k oQFSfvBFqXeNeOZSSr0OtfRUPAGPrKmObP PUoyM7yfIKc7ubMZe5apkelXVmpwfMnCVhtbXSK83ZhmsJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugxW1dEWVMLRkPQv5bXjga4Gurygr/NKS7tnXA8KiT3EaVOpuVrVfkxk/BAR11wiZNzVUJXqrsZEKQky/azT7 Ha4kSAoAXq5jEizrX5/vgF8D36poZAJzfdDOae2meLP1nYA5wSAw09LG3dainR9f6nA1iruPREIqGcY9ZciCeZVZ3wb88ild/.../BrB6IfP yvfTPC36T4N wOPjH6Kg2FWZcLumh QlMS4VfIugAWb7 IigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbQaVCd7Yd0wPDXr7CgWLu8FQNSBoPKg30xgmFPs9OLCP

http://fs41.filehippo.com/7205/.../pidgin-2.10.7.exe

http://filehippo.com/download/file/.../

http://www.filepuma.com/down/1387872517c2421/pidgin_2.10.7/.../0/

http://www.filepuma.com/file/1387872517c2421/pidgin_2.10.7/.../0/

http://files.filepuma.com/files/chat-and-instant-messaging/.../Pidgin_v2.10.7.exe

http://www.filepuma.com/down/1389116275c2421/pidgin_2.10.7/.../0/

http://www.filepuma.com/file/1389116275c2421/pidgin_2.10.7/.../0/

https://downloads.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://superb-dca2.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://kent.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://superb-dca3.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://jaist.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://softlayer-dal.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://iweb.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://ufpr.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://optimate.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://heanet.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://garr.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://hivelocity.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://netcologne.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://softlayer-ams.dl.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

http://downloads.sourceforge.net/project/pidgin/Pidgin/.../pidgin-2.10.7.exe

Scan pidgin-2.10.7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.