home

SarbacaneSetup.exe

Sarbacane Desktop

Sarbacane Software

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Sarbacane Software  (signed and verified)

Product:
Sarbacane Desktop

Version:
1.0.0.1

MD5:
3b55f25a109b5d3c47436a058ded57f6

SHA-1:
62a96013c4bbd3d1ed39e6b3c56d8cdca2be2cff

SHA-256:
ae7bce7cbdebc2ff5eabc9c6706b4f28014ae4d787782a89f8e4abcf1a9bdcad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/9/2025 2:12:32 PM UTC  (today)

File size:
2 MB (2,122,840 bytes)

Product version:
1.0.0.1

Copyright:
Copyright © 2001-2014

Original file name:
SarbacaneSetup.exe

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\users\{user}\downloads\sarbacanesetup.exe

Digital Signature
Signed by:
Sarbacane Software

Authority:
DigiCert Inc

Valid from:
5/13/2014 2:00:00 AM

Valid to:
12/30/2015 1:00:00 PM

Subject:
CN=Sarbacane Software, O=Sarbacane Software, L=Hem, C=FR, PostalCode=59510, STREET=3 avenue Antoine Pinay, STREET=Parc d'activité des 4 vents, SERIALNUMBER=50956859800015, OID.1.3.6.1.4.1.311.60.2.1.3=FR, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
09B9CDFF4FE56FD2760EFA13CB2AB54D

File PE Metadata
Compilation timestamp:
6/11/2014 4:11:28 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:NTggq3IifblhxJ9EkwSvqB34lXyvj+LRgvgUlYt2u8vqB34lXyvj8PmovqB34lXt:NInfblhhPXdLRt2zXOyXQXYCXTU4a

Entry address:
0x5EA4

Entry point:
E8, DE, 2E, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, FF, 15, 6C, D0, 41, 00, 6A, 01, A3, 8C, 7D, 42, 00, E8, 2B, 34, 00, 00, FF, 75, 08, E8, C0, 33, 00, 00, 83, 3D, 8C, 7D, 42, 00, 00, 59, 59, 75, 08, 6A, 01, E8, 11, 34, 00, 00, 59, 68, 09, 04, 00, C0, E8, 8E, 33, 00, 00, 59, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, 0B, 28, 01, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, 70, 7B, 42, 00, 89, 0D, 6C, 7B, 42, 00, 89, 15, 68, 7B, 42, 00, 89, 1D, 64, 7B, 42, 00, 89, 35, 60, 7B, 42, 00, 89, 3D, 5C...
 
[+]

Code size:
108.5 KB (111,104 bytes)

The file SarbacaneSetup.exe has been seen being distributed by the following 2 URLs.

http://gsf-cf.softonic.com/62a/960/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69687616&instance=softonic_fr&type=PROGRAM&Expires=1426641825&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=QvtCrKFfjMj4br2NP1~uKhVqxed9WMu8bO~QC4UCWBr80Anx4J2jIKoigqardgpsI3gzGZN~rZ3el23NrfJS~PdQCaCMl0Zx1QRFIW0zKcwE7bJG7Ihb7RKsDzXgtTMFZCxsoFZkzMGObIbHzQYDmXOZjGg7-T1bApIsheSr-ag_&filename=SarbacaneSetup.exe

http://setup.sarbacane.com/.../SarbacaneSetup.exe

Scan SarbacaneSetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.