setup_11.1_full_32bit.exe

EditShare EMEA (X-Edit Limited)

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
EditShare EMEA (X-Edit Limited)  (signed and verified)

MD5:
7f77d4722feeb41e34329366470f0688

SHA-1:
71e00c5224687b71edd972fdd2c772160a714592

SHA-256:
4a38079c9402eac293f5419cc573ef003a88bbbd0401b597fd77f0a9e16b74c2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:11:48 PM UTC  (today)

File size:
69.4 MB (72,720,560 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\4fa1c9165c1398e0457a3bcba496c17c\056987d758de66fb8089aab30f957bdc\setup_11.1_full_32bit.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
9/29/2011 8:21:45 AM

Valid to:
10/29/2014 8:21:45 AM

Subject:
CN=EditShare EMEA (X-Edit Limited), O=EditShare EMEA (X-Edit Limited), L=London, S=London, C=GB

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121427CFB0435F7C7680ECBCF170715EFFC

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:8lwun7PCLCPIjFyw6bUW5L+txEgwwXxX/pGh7FcO1El6+MlqBfETQ/9X:8l3+/tWh+cg7XxxG/cOWbMl+fc0

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
8.0000

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file setup_11.1_full_32bit.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_br&type=PROGRAM&Expires=1485095516&Signature=EERYgv1~5d2Akvk4CUvokTNm2yHn9jXKPg7tAUINzKMNzPFsN5bZJQ2dx1sURbWreIceyL5uSoDUzbJzGEU1SWwB514nP9fHhkTar83mDohmCqt~JdxESiTTFGpYGWOetwsBXXwMfHP7jCZCGs0JU4yRPW2KFlQyJVCUn3KkOuQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_fr&type=PROGRAM&Expires=1484987574&Signature=LcFdI9b1Yj6udvG2k0~3m8MTzthZP~iyWC3G~5M2sxw4RBj2Puy~CzcQ4cAo6lpZoFH6xnRhuzRNcR-WadCB7skEYBlGgEHilhCiNaxUnwbvIj1eLmT4LmEhdUbF0G8ewjrjQMUBRg7pBePyhQBSf8anhVtDS9Wpj3WznL3UlhA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_es&type=PROGRAM&Expires=1484459787&Signature=SRNNSGfPzRdaJAVTYFXfSsBXXwiLqqXjO5Gy5yvVaUbJcLkTvVnsFKXAY9Cpu4oDigy6KAa47~kcs86GHKdZDsMoyEREwAGB-pWB6djmkjilbpKItQSaE0YbaCbkPqq8g8Pzp3rYAFjhQOCP02S0J9kXaS6e1shFPPH~T2xt1Qw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_en&type=PROGRAM&Expires=1486061980&Signature=AKguePVaonp3GAq8m-VYUu9S1vGJ444G9LeKzFi25a2CDpjb6vSf95o5IxozW18qS2RPFK5mfQnGpH8H0zEb~J4AaehrXz-wBcaFLb7GfQVlhdQ9jADx5gtLdU5wofFxtPnfOBFOJBxhZNOSe-R772vi~Blzi9UbK-ECukJqY7g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_es&type=PROGRAM&Expires=1480415885&Signature=NP9sBjimdcnZWY-OBwhKwW7n7Vbap4xh3qXbzoGkt2csAHWZXRAocCPanMGZFfYlWXFDL5lCMsPvoPkULzQlfXrAVEnjU4MpyBeT5dcbfOdBnPoq43Xz08hzFUBp2tJT8jOYIMfOxkFm7BFYsN6T3UJocBNvENaVcvrZkTZ8Tig_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_en&type=PROGRAM&Expires=1477063868&Signature=DZn~~Wv~lsbO7KWrKoiJlsiKcLuhsFuXu~beIn6AV~ZpPYeO176gmWXKewJ394r7OK0CfXRtdNEs8SmXUT1KFiXPaxgcYJFtR-5qWss0nRBhtLHrySHyhRIUvYQu6rgylucUPmnm8M92dh1czcwJwLHPNpOqscOs~Xib0FQMoW0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_fr&type=PROGRAM&Expires=1479534044&Signature=ZOypKnNSzBhpS8snbp3tiV2z~FHLL9zojnpQXcr79BEBILjYlTdQJ17n~WpneaamFKnq0jIeQtZhAi9454BW6RHZ9mc-JQf98uI85HiQdtUuVk6byRl4bYe8JMWa--v9IViF-2EjFvG8ZVjcjrhMR-H9H29Qcb6sb0kEwrtR3NE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_es&type=PROGRAM&Expires=1457104778&Signature=K2vCu0yIKwnmP8RUJ5qWzTuZWYV6vRQGZYS7AXUgFCr5fWg27-EgtsuyJ7bTuHATuPLLVnjfQXNs0QRA1kYvq1pnq8-~gWmQbyTcLknWt9Ct467tHRZebT4XArTBcHDgS2Y-8D1xwPwxi0gXzvERyjX3daOE8Rk8WvRsrbkU46Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_es&type=PROGRAM&Expires=1472748891&Signature=L3yZpuOuUQPV~FzNWhyDhPf7R2jV-yX4Rn30ArC2-Da2KYhDdabq7~M5FBnaEWehj8GeEHrmN3lpqS17tPIEIpm4QVoQ4Zt18GWWo8XpO5-x-CVAI5LkQvOTRssNM20v6W2L5kXY9igl-br6Q4zu3ucIAy4qY~LJxy38PRt1xiU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_en&type=PROGRAM&Expires=1485263130&Signature=Bqiwb5QJtkPfaAmhMtbyBt-A5gmKTFk57jqz-HhGWVjCnpGahuTsWuzzwpWygUcYqd3WKPhbiiO8LYU2h7B81zaKg6LIVoNvC9~DSd8G1wQ0uiLbHTSKOTaacba5xbcAZ0boS6BqZYpceOsDv1a6rvBaNAxp3m2JYiyEZRI7EAU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_en&type=PROGRAM&Expires=1427514036&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=N2VqNyKCJRjz3Tu8zjgDLqTMI-gyBOzKFTD-Ajx1VjvT-maGQASJbZABP5jfdOCOMg4Y0Kip8cXOFL5NGZjUSmlUhgK-2lJrPJGIadxQj~N~4nF~MUF7K-9vJQbUgTR4yQJscQsyg2-SfuniDY~RrVs2Vh-e~3lwmD98OYVJwGQ_&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_en&type=PROGRAM&Expires=1462293445&Signature=RFXlFRikO~8ge31sm-uoLZ-R1bHVrdsMd3azstPiLOq8g7hTF~~BJxajd42plruAedTSl54abC7dTkOf~KjNYsVzIpBZC3FoQoeOVAcu001uTPwKLzY8mLaZLicVEB4Ivkay8Csgjf~8zTHHm2twMaJYTFYRWUrYIlb4LCLNzHE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_en&type=PROGRAM&Expires=1486280831&Signature=GmEjx1PgjOcH~MjoVP63wPlzh~nvVyH2EnjRHuAWYkfqKFjVTsZJIcJMNELO~re03D7nmUrYAUZvNy-4jzXKIcSMMrcDrYjHiB5CgWeZjWqsASyQTXw1et8~Bc9aWkDaTeKnvFZZlz5unuhh8g6bMKWDBkvRye2MZjP0dCyyY0M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_it&type=PROGRAM&Expires=1485204076&Signature=R~Fm-pny-Jf1kdOO8GdHE0KjphFg0Xsw2sGS1~hrRpuJIhQT-giUpBkdsfC4N60XfBTh3ZBWydsJT9RD9~bQuPeo5uyblc-SLpZ8NeDgejPPHAvMBbds5SiDZDlOzzKOQLQCOcpPTBQgkRBAl54Dw4T7xjNPagpHtZQ5qvjO7uc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_es&type=PROGRAM&Expires=1483641514&Signature=WQ6Mp6tzTc2BC3IMHQvHMQsbYMPXtast5Slsv29gip1kFW4YzGMQxHlbp5hCy9fdzsguwKH7YSwegGyRcvC0UHjTWlV0os19xeeDUQ2TDxdrSeWA08P7co7sDfol1n70WToiD6v9F8GKSYv4BDXL8aOGYryW0fBzkS5mSS0ZJcI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_es&type=PROGRAM&Expires=1466950088&Signature=PvT3Ccp3k7YpN6YzXFbuK-6ZzuRr6uyB2tVhVmmptRTykrVICxcLpZbIY5b5c4WyXOhZ-cYGX94g7IdUc8pzHrbkLxqyXjcl8bgvkE8Q2AsoKxVi642h8yUXZ8dL98wj-N5UaTN5LEawcoE7T5mmPFlR1XzPtMIvVSY~oJlDwUA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_br&type=PROGRAM&Expires=1476520885&Signature=T7Rij9MPc4er~PFhDMTijFe3KP91X9Zn0kwL9uXrnglrlj3qpBjJbPlBh7sTjCyIRQenmwCH~x76Q-hoiU-AafC5M4~rNOL2E-4krnMNu0JyQwuDwuOHsLMe2muj~S5qZ3YnoISz2PMSbOdbuAltBGz9Y1E01z2IY46nSHW027E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_br&type=PROGRAM&Expires=1478299669&Signature=EPYAclbL~WXEDL1CiPnMu9vh7piXVTUdJqNK7y3TPX8nxme~~4CE9xQCZ2ZE5eolmnitTMu-rruremU29gvLx63xh-yg6lnn5rdoiH2lz-XkDjK-VyanPvM6jNgnNKNtQz4YYd8RP7sLEUBRlMCOewOFM7dStu5rgVBvR-HmJG0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_br&type=PROGRAM&Expires=1480307417&Signature=cAu1Ix4pK~mj~sH1RkTowhPJGGSJhWJE7vyOC3Sv1vCwmQi9ellcdLGK9FBY57XQtx28T4x8cenO6b7J5838b~0MiVbDdbG2okY8HB4jpzfiGBrMQjreSmauQcx06ZNT5p94P9HZkPNlMEG-mntz0aUAbxZf7eDk-PVg8v0uuw8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_es&type=PROGRAM&Expires=1477332076&Signature=HX-5dxk5JV~D4h5ljVOQb6dVEnmzPLUkKklZUvs2gwBkrpRC9Ku0hSYKkKgCnbfn5XrEgkJMudwyPKUqwOCQURnfsARCoIYo4T6roC9kxVcOzIjCp3woUrSdBlDimVW7x6sqHCHeos~ZswCzxz9-dIo1wJa7T9XAY-KG8i6BaKU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_br&type=PROGRAM&Expires=1480678817&Signature=TWAMiqtvuCgokrMM6cnY9W-B86zxYn9QQuiIEZsFUOhlU6EWsundbVgmVhL5aiZkIC2E1zjoUcQoKo0MnFE9tilqhbHp3ddoFHsQ3B0FtiL8nJPPCuSLtGN82QzfgT-EyrZ9BgPyI8heGsAuT1Q-v7fmnvt1jyjLRKr1LieU7Yc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_en&type=PROGRAM&Expires=1451573642&Signature=HGDBPxDmVc3pizlxePa6R9aMWwR6xn9mQ~f3LjWTD5hRuLBhQCbxWsFR45nbP2hMsBQp0Ao4leDJUnW7BuAgEXPh9U43EubekvZr0nR9XzbP3utQeLwG9laUibw2Qu-0nAtYr6LCtFhfJ74rYWfnG1EtQOGNvprxGwVrn4PlPGw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_en&type=PROGRAM&Expires=1476185166&Signature=In7FFJJDi8e~HBeqpvRObiY8r9VMTe5-zDz2sDVBod4MxYRWM7GqqEH~EBYsZwrpDVdoJTd25gwt2SQyn26CKek7hkhMTHe3xah-gKAxQM-YCogmmjTlxXKYBad0dUclnD5EhMP6i2IlbfNDFTmh73Y0bTtfy20zSm86BVkAwv0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_br&type=PROGRAM&Expires=1476108414&Signature=DTadBj5MFDQUg3ZnQ19MZGAGmjvZjCVpT70rZ1hdSy7DdJYGP479oEjF4A0CO~gzolC-MRfHpX04sIejvGt~-cOdHKO8a~rnubG~ehC110tWtOVe6AznDt14gmN8sTjM5zzbnFHwq~gp38yMwsqtNGTCgGSMdkWQhfVBpr6CUk8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_br&type=PROGRAM&Expires=1465650582&Signature=Blh1GS3pgbhH6LLPHy8eSvkPiuAKb-BxSEZi5Pj1MyUmjMtmScKccBg885~QAv5Cn7JTQipsRff~dkwLHAKY0TEAsieitk3Rjy069U2z7YP6a3K5RpzcSkCveQF9lvtBRcT07jLk-JI0lItavIf-HMeE-NzYIq00l9oClWZe6-w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_es&type=PROGRAM&Expires=1477806816&Signature=BzZUVdoAIsLwGxDqPB0T10BSnWO3sQovVDH0pMaSGXby4LEc3rJNJdIcEqVH43knZ61oEGTMgLaXWWFZauL7-Qf2TNgGwAIaevSIQjQuid-Yz-eBZBPGYexojoPeBYviAG-SiRxKskeTWMyTdFITRaMbkRdNYZ5K5Nz7ub1AIqg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_en&type=PROGRAM&Expires=1471170410&Signature=hr6-2N2SrX4CD67EeMpfxq0prleWJX0kQy1ZZ4wEUKM5cVdYKoEUbBaWh-27dYdqYFCHvod7VOvvmNTksHV7yuTCpfNpul5Kpi7cQkCTObmbwEx6ygnSosJyWVfZGNas74KP9ds9kF0S06IvX5IZ4-hwi~IeoT2azYS7mrbMjP4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_br&type=PROGRAM&Expires=1429942084&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XIOZ2CiLqg5SpWa9OHEZRedYQlVa-q61vlM4hVppJBRC7SDbyb83AHY0ZZpKsKUSIHaq14I1jzlroFEEQZ577jJm4u6QIhXJf09iGiZCesnWdqqnkhy0TKXAVbsoMhqM1wCDOigDT~ne-K5RwDqm~P~3nYUAulkQTwHJpRyF1ho_&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_br&type=PROGRAM&Expires=1464133726&Signature=gTcaZOY7tuPCO2NwgKPJ~z2w2MlT2BPIslFz09gucT7ISVIHpHUl1TPGw14GSZP0zs~9FwT1adsrIGTl2IYJjhm~-YfkoJWLEJVVp5CBKMaUB-Pwr0hovr-seNEkJZCIAergRc98dSJ4UIgRjwhUSfFBzRPjAtwQ3lCRjTckuXI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

http://gsf-cf.softonic.com/71e/00c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318077&instance=softonic_es&type=PROGRAM&Expires=1476453975&Signature=iiBYsNpOePvdctZZIHQAJNtYgGyx6LIVZzUzSyExKuOP8QjeMlhoitpXqgeOSq~ENRQBXnEj-HgsdMU2DWXPJuucybQrPyraayglhK-zykz6pBFvkavO94AstQQuBklEBw-HiHUHtwnpBKE-vc7abIPvVLkAbCh39B69LMRnHVU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=lwks-download-32.exe

Latest 30 of 207 download URLs

Scan setup_11.1_full_32bit.exe - Powered by Reason Core Security