home

setup_x64.exe

Free Download Manager

Softdeluxe Ltd.

The file setup_x64.exe, “Free Download Manager Setup ” by Softdeluxe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from www.freedownloadmanager.org and multiple other hosts.
Publisher:
FreeDownloadManager.ORG   (signed by Softdeluxe Ltd.)

Product:
Free Download Manager

Description:
Free Download Manager Setup

Version:
5.1.12.3865

MD5:
79fb0595dd490c3846aad24061dab98b

SHA-1:
5953af9df49a74c4cddf54fe25c645a692519223

SHA-256:
947da27c9914a793e381886b144a2e646036db869f6a268ec6abb08423e183a1

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/24/2024 10:14:09 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Softdeluxe.FreeDown.Installer.Meta (M)
16.6.10.13

File size:
45.8 MB (48,069,792 bytes)

Product version:
5.1.12.3865

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup_x64.exe.av1e8dh.partial

Digital Signature
Signed by:
Softdeluxe Ltd.

Authority:
COMODO CA Limited

Valid from:
8/11/2013 5:00:00 PM

Valid to:
8/11/2016 4:59:59 PM

Subject:
CN=Softdeluxe Ltd., O=Softdeluxe Ltd., STREET="Universitetskaya St., 19", L=Dubna, S=Moscow region, PostalCode=141980, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2E75CC2B1043779E577FAA449BCE00A4

File PE Metadata
Compilation timestamp:
7/16/2015 6:24:20 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:QZWJy8jp4nRHm1vsaBrKRgIfcXp9dtBU4FsImu/q2zUhU7/ks7kITW3AGpuIl4k/:f/SnRHm1vsErKO35XUWsH2OUzks7kITE

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Entropy:
7.9999

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file setup_x64.exe has been seen being distributed by the following 50 URLs.

http://www.freedownloadmanager.org/.../?hash=55ac640b98a646b17f1ef0b6fd594e9f&f=fdmlib

http://software.informer.com/.../alt_go.php?type=2&size=336&pt=program&st=5

http://www.freedownloadmanager.org/.../?hash=a97f396b6c87a9c275253fd2ff91541f&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=a50d1016d5e41855c2eb062dad3a4a12&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=ea52600c0184343f78513502d13cfc17&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=7a842462142991b38c12b8caafcf19be

http://www.freedownloadmanager.org/.../?hash=a795d44a68a9510af6ccd611aa30a7e6&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=f598fedb0f0ac6b40e0030b41985a90f

http://www.freedownloadmanager.org/.../?hash=daa22b573a46b41a038cc4c09d645119&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=afc35683385e60c8dd638a900e150770&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=d7e7c51e679fd5ce4568f75012bbde05&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=e1eb6c2f3fbf9919d7852600242fdea3&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=84ddb1d37064e31c14dc0362ef0cc0e7&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=6bbbfde65b040fe8bb42b956ba7db704&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=41b147ee1b9f797ce898ecbf901b290b&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=177d6028589cd1544e6c125b23b880d9

http://www.freedownloadmanager.org/.../?hash=bec97e57884957a772d006911f3ec984&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=dbebf7cc0bf8af09eaefdae34c5a3874&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=5b98069c6dec023f2628ffcf2c0e21cf&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=ce923b8edaa6c926138876ee3b698ccc&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=6a8ffec3c7b38247027b147d6ac283c6

http://www.freedownloadmanager.org/.../?hash=f764d867e75b75a05299477612a60d3c&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=ef745c2e1ab80fb3f02f7257a5435c14&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=3453d01a2667d7ac8c0e79d5c1f0c760

http://www.freedownloadmanager.org/.../?hash=87a487b5f101663deacd54abce083779&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=12929bd1bf2e53068e088fb443580a78&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=47d417df84f61d5c1265ded1e616b6df

http://www.freedownloadmanager.org/.../?hash=f6633d9604cc43f0528be35b8c2cb239&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=6f09e371e4aa9955c53cbafeebfa3c59&f=fdmlib

http://www.freedownloadmanager.org/.../?hash=12d160ac2dee095c2c8c4c66670c8b24

Latest 30 of 53 download URLs

Remove setup_x64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.