home

setup-sopcast-3.4.0-2011-6-9.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www34.zippyshare.com and multiple other hosts.
MD5:
b11dffe136bce28920dfb4c543ec0bbb

SHA-1:
ace1cc44925ebc0eb56638b621d15c4b0ac236ac

SHA-256:
99005781d70b4f107491c817687ededbb14e9c5c9d0cb132f54f344480b8c4cf

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 1:28:27 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
7.9149

Rising Antivirus
PE:Malware.AntiWare!1.5593
23.00.65.131215

File size:
5.7 MB (5,944,736 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\setup-sopcast-3.4.0-2011-6-9.exe

File PE Metadata
Compilation timestamp:
9/9/2009 3:23:23 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:MHsHGo+u+nZurN0En+Ej+AcvE9gII0Qwn73IaOLUcV1K7PltizkyDmEP0T:MMHB+nnZul+SncMS0Q+aLVk7PXyZDNMT

Entry address:
0x354B

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file setup-sopcast-3.4.0-2011-6-9.exe has been seen being distributed by the following 8 URLs.

http://www34.zippyshare.com/d/26012843/.../programe-tv-online-sopcast.exe

http://tinyurl.com/Sopcast-fanatictv-net-tv

https://downloader.disk.yandex.com/disk/87351b1b756aa3fadb234982006df78f58eccab0959858c698bdfdc2703e8c53/5533f700/01SysOskAYJe_VeKW07k33xQkaNReo0P1eRcnwTM3EklW1iu0s5O8o2wfWut9DpYNTOOKqj2WDisGfhJ9ZIVBw==?uid=0&filename=Setup-SopCast-3.4.0-2011-6-9.exe&disposition=attachment&hash=dogvJIpODlm3awp1/.../x-msdownload&fsize=5944736&hid=c9946fb9819306c9ee846089e9f512df&media_type=executable&tknv=v2

http://dl.cdn.chip.de/downloads/.../Setup-SopCast-3.4.0-2011-6-9.exe

http://lfiles3.brothersoft.com/internet/.../Setup-SopCast-3.4.0-2011-6-9.exe

http://www.ro-tvonline.com/programe-tv-online-sopcast.exe

http://www.ro-tvonline.com/programe-tv-online-sopcast.exe

http://files.brothersoft.com/internet/.../Setup-SopCast-3.4.0-2011-6-9.exe

Scan setup-sopcast-3.4.0-2011-6-9.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.