saverforsnapchatpc-setup.exe

Saver for Snapchat PC

Athena IT Limited

The application saverforsnapchatpc-setup.exe, “Saver for Snapchat PC Setup ” by Athena IT Limited has been detected as adware by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ChitChat.org.uk   (signed by Athena IT Limited)

Product:
Saver for Snapchat PC

Description:
Saver for Snapchat PC Setup

Version:
1.1.769.0

MD5:
03fa9e894fe065115f155064c5334ab6

SHA-1:
b141756705889860b17cc1e3f5dd858110c17482

SHA-256:
dc22a3175576d064e5e9736f31b123c2578da317581450b3d32ff7c09aae3684

Scanner detections:
2 / 68

Status:
Adware

Analysis date:
4/25/2024 3:09:34 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2015.0.3422

Reason Heuristics
PUP.Installer.AthenaITLimited.Y
14.8.31.22

File size:
4.1 MB (4,295,368 bytes)

Product version:
1.1.769.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Authority:
COMODO CA Limited

Valid from:
9/11/2013 1:00:00 AM

Valid to:
9/12/2015 12:59:59 AM

Subject:
CN=Athena IT Limited, O=Athena IT Limited, STREET=3 Oakapple Close, STREET=Wanborough, L=Swindon, S=Wiltshire, PostalCode=SN4 0EW, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
77A23924790352E85BE27B1F3714E36A

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:fUDTaPDe/e0E8zs3iTqJYTvZw1JxNev32lNLbKkPuvs5yZt:suDe/+Ss3iFTZw1VeP2llbKKuvrj

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9961

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file saverforsnapchatpc-setup.exe has been seen being distributed by the following 35 URLs.

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1435131081&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MLlbCEd608DmiCSOzfa0k59LWmPZOfi631jhbdecyQqsgLh64VSaLxtAcD6P6dbTWzi-IwsBToyBBU6M-0qlNY1P3THpUEdtJFd1slqmtPdJPbbLODOFZtFqWP-dnDurEOnW1ttyB-bPlC0YWmemx9war2VRLUStxqh4x9NRsBA_&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1460940901&Signature=HbguIkEiGyR--i2SdTAyM06B1k7lubI18CvjQbcajmT8lVJRsNi9qSg8U5X1BJXPa-A7rlPIsomg7~cCMCjFzyv9if8wctGeydU8BkyC5WJM05GdjT~yYFfxycIGKQydbskcpyrsIbcaI5I8N~lTDlXsUEP6q8pBSKU7wSnlfg0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1455596677&Signature=UIimiX2B5lN720l-MYlF46q14TgrT21KR8Ww1U6IKCMsmCDGuFaWhMpj-z473qBp4Vm24ZLJ5SIpsKTmtqfsu9mAdZM46rq0HLv-uovViGL0Udz1xJvZ9970G7jJtB-L8fne5nsgSQUU29mQgfjPF0B1DZ72d5en03b~dHvjBmA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1486712693&Signature=MZROBNd3hCxS7BNFswitixNHpRk0qsmKgje979FSPlrxjGJbjCh4DOwFDGLaqJKNO3M3rdArKqUgCKh4HgBor8-Rk6PNEj93W1IZlRK3P6-JGHgw4uU7pJfCG~mb5Q6ZP6QICbn---r0oJ9Kz~qrFBnX1M0rMhnFWpOY9rLQ6no_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1433927390&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ImWr7fZDwEb4e9dmKDoR0Pw-e1NpG46j0MMUGiuPOtWwIcukG5XGWRkXGdsnkan9iDVb22l6MYDfu~8IV9Uygy4-Fy2lz8lKMBXvrFM25evG61YPiq9rhISv2qMy1XvkPT6zJtLI52tTsvcp9Uf3tIdODdP9NlYbLGVYLDOATDc_&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1441811961&Signature=dGBQRptpIUn8Crwp0uqIiJ1M0NjU70qABARo2g9l48YqSsRvurWMmFMBJwlt3xghaG2xo~IfzMYWrkybw7JO3pp8T5Jm04ndsCbwOz3Aw4em4vvEGt7GAHEQ4mohm9vzQecsCrcN7v0XCNmEi~vgfORrrDZO2~voNck-kMaL3Fg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1479362232&Signature=hghH2Y2eFT6EdfPpXrZNl7kPHoHXmXrPxjjpdRgelD5G2S83axh-WzApM24L0FOdzN9i9XO0LpuIgScrZW-ZgM7cyyGDu4s-IenBpXmHcsDcU9qGYxl0JsqOwPiLAhYaVKtVrMs4qiE~WmfXWH-wjSowh21U8GjTn7Mg~8vAv7s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1465070731&Signature=Mebw4Xq3Xk-6BoGh4HETnPffx~TSujV77ESMZ5Akkk8sXSdg3gazLZrPl~Yp7BbKixwkQUyIXEXtRnr1~wSclx-96xMOVAih~X2Is11q9R74sqDcvYhOFeRQFvAU7CXeTIbSHGEDbsRBz26MbdQHdixD91KROHsLqzcj~gJtkfo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1449134561&Signature=JN1GkawLDWcDZ~yDQEJv4~Fmpu2brDTq7iZBnchXndgzW7EHtZAoeE1gnnl94ZBuQd1rYeuZidyL2JOqjQKaG3XNnVaeKrgXB8WEqEVWGm6WXK~-MKg2noscXVHU~Ye0HW2optlbHPV68TDcPlqBFfCUHQoaqQBeOoDv-lx46vY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1460628284&Signature=QrcIUgV9FTLOr0j1FDaYYZBX6L7iGXbI-gjK84Sx3OClT8-vM0iRo9KyNIrDe-7w30hyKcL-cnX7GJm4ffUaD9ltodrEHwHftE6m7MdHa-xK1G2~q8Z2FwjmUzL-UZr5MaZtypCHI735Kwun-szN84gbyheEj4yqYaR3sUwdkTw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1470292962&Signature=PngrurEheq~CUc~fmMK6xpM6yBrH0MR9yxFKJbylS3ZH89MfFqA4VsDZO~sC6omlDTfKxBkPivAKcGgAwrCluyasw6byfszjlRrTK3uRzWxBLAY6trRuq17KRllxus2GLqCsTrdx-N1poMcITzjv90zJowh1QWIJRJNL8jLXRBM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1468911034&Signature=dTUGNexFM76X1Kv6J4u5ji3cBZ454oYOyTqfpcu7oxfGxfrPjbI3zf2MTNw4OBn7zqgiF08LoiEOKsImRe9PWNdZ8Pk1cUos8eKznUJWgeaM6X8~GSXCbENSYmi4iSz-SFNMSrds9OgMo4EjhdLw5w-dq3SIBTAx0YBssXZ3pdE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1478760226&Signature=iQSPYNjHdLaBpRXGJwTMXaV~BLqpzW5g1jLEBioReyQURql-7yNASdZb48r1TBSO-X22~~2fNFDxHdMVOgfuR2E968cXsXu5gD0LS9lFlYCSXmivjl4zxfXKKteoGUUfEast1622z9HXufO0U57AvDOcf3HhMfiKsRLfh3HIgd0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1473722336&Signature=aPnfY26SwNP6CbnvhUhTIQakafRBvje6cxCqPwUQonFZ8g1hE4XmTYdIMOf31giTmyggAYDVSrGYE2-0gUtUDiX0NL37lXQAbAHWTV7SqqXRtgb0xo~9zsNzhLHwk9eQqNKUIFKa7mhQ~vCf5bQdupYiJiY4TOPXmv4mEEqMTFY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1478819456&Signature=N4xqQZdqJN83TNbiA0S4-TN0D0YVhbkRr9lU4sVBU7w4Zu3KWeawzuocNRF3eEh1V19sMR47ktXSfJot3w2-7AGD7V4FJOufU3TcXkrFYiL8q3bThlE0qrXvjphNmBIlbVDd~1OPl10hpXernNZVsGBGo5plkdkLenEG9SCRmfY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1481545919&Signature=iv8Pfc3LAx53ltlmArKfvHgdyQrXZsK58NuVtIqIG-un-BEXURE-0pbrd4sBhDTsg2E2svedcEj5U2IZC-EyyppfMGFRy33jIKarImz9B6Lx6NN8uuSH~~t-srvY7tCjTh9N6hGWvmDlyRXxjtp~tPnHmEtXvYSsx1yojcffi6Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1479124643&Signature=BqtUPMLpssAlXljmFwnOVIyIim4ILbdeOKXWn1jzL5TWD4GPk7ZXCmr4hl~fZWaSounubTsuguHWH4tvKD7YogFSNnGeeQw3EtcfyuTRNXzxnIWkho3~RSrtiGEFLxqimeaEJ2q0iLAeqVdrCtsfPWQ8xJJt43WP1IxBCuoqt90_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SaverforSnapchatPC-Setup.exe

http://gsf-cf.softonic.com/b14/175/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69675291&instance=softonic_en&type=PROGRAM&Expires=1432792608&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HjBzj3kS0nthp6ja2WhJud-Bi4XebVJrXDz0pk9T9vhbRdL4JDAbObz0IvbJmKKFV4JlBAgxV6kottHTt1xGsxJ9sHDCrVqSRGXZ7EiqGeWHoGQ-SDAanV-R20~7x8zcgBsrQ8N9lP-fnHdQ-FjQMtW5m045ydTt1pMxL9yfoHs_&filename=SaverforSnapchatPC-Setup.exe

Latest 30 of 35 download URLs

Remove saverforsnapchatpc-setup.exe - Powered by Reason Core Security