home

setupbridge.exe

Bridge From Special K Install Program

Garry McKay

This is a setup and installation application. The file has been seen being downloaded from global-shared-files-l3.softonic.com and multiple other hosts.
Publisher:
Garry McKay  (signed and verified)

Product:
Bridge From Special K Install Program

Version:
2, 0, 0, 36

MD5:
3b44546ebfd6188ab91e2702c33c2b23

SHA-1:
63c2b5843106d26d8977ecb705d190cc530ef2f4

SHA-256:
9201b55c788833636fa7be4f53173be36787c038769766ec4321bb2ebe8e31a9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:50:50 PM UTC  (a few moments ago)

File size:
3.9 MB (4,042,520 bytes)

Product version:
2, 0, 0, 36

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setupbridge.exe

Digital Signature
Signed by:
Garry McKay

Authority:
COMODO CA Limited

Valid from:
2/13/2014 4:00:00 PM

Valid to:
2/14/2015 3:59:59 PM

Subject:
CN=Garry McKay, O=Garry McKay, STREET=7 Smith St, L=Brunswick West, S=Vic, PostalCode=3055, C=AU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
31CB8D3D2FBCD6C8EFC8152BEE093F34

File PE Metadata
Compilation timestamp:
12/9/2009 5:38:11 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:6UbjW5wD838r8Dg2vOZCwdNE2jEJt05KgSTGlgkgo7:ZjMG83fDCML65oTGj7

Entry address:
0x13B3C

Entry point:
55, 8B, EC, 6A, FF, 68, 98, 87, 41, 00, 68, 60, 68, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, A4, 80, 41, 00, 33, D2, 8A, D4, 89, 15, 80, F0, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 7C, F0, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 78, F0, 41, 00, C1, E8, 10, A3, 74, F0, 41, 00, 33, F6, 56, E8, BB, 03, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, FD, 2A, 00, 00, FF, 15, 10, 81, 41, 00, A3, 8C, F5, 41, 00, E8...
 
[+]

Entropy:
7.9881

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
92 KB (94,208 bytes)

The file setupbridge.exe has been seen being distributed by the following 13 URLs.

http://global-shared-files-l3.softonic.com/63c/2b5/.../file?nvb=20141128101446&nva=20141128221546&token=09764eb6e183aedc64000&instance=softonic_en&filename=setupbridge.exe

http://gsf-cf.softonic.com/63c/2b5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=101186&instance=softonic_en&type=PROGRAM&Expires=1464391046&Signature=UE6r1D2i2c9OC~rRT6xP8WUrPv3Oy9i7hGySQwzWzJJiEF5odcfEQMeHTpjARQgbe76zM~xhM~ia1blZSroohiE3lrmt69HHf4o9tuxQKGdYlBeoYbzFxdt1J~32S0DwIBhW8-lSViZuejPxqOfoS8O90DQH2v5VDPHUlitggLk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setupbridge.exe

http://gsf-cf.softonic.com/63c/2b5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=101186&instance=softonic_en&type=PROGRAM&Expires=1476418795&Signature=EN2WkUd84Wipdpxr8TEehTV8skZdZh5xtUDzaeInxOaFq9gRouzJWu2SV1j13j7FunjnBnp-m8h-B5P00kUtU2bTiYxahPulchUKAnyrpBnB-yXHx4nG-c5pmHj5~MLwXXWmNHtOov4Kdg8-V3vvabjXpAyg8jaoJ13Q1CuJEWA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setupbridge.exe

http://www.specialksoftware.com/setupbridge.exe

http://gsf-cf.softonic.com/63c/2b5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=101186&instance=softonic_en&type=PROGRAM&Expires=1477571148&Signature=fJA~LIpSHdefn3NCXvS3cRoaVDge2utsST7ToRWnC~VSLEVVsnvarkcVNBhkv7mHeW-r3966DJmJOtfxvNvHm6YpIM6qTGrcMoJuKEL~AyGj8L3dB5vN4W9wjvHiWqQQGgLgvBnfl2SlVYmeKS3MoA0ttXQIbuX2FhipyRU-sI4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setupbridge.exe

http://gsf-cf.softonic.com/63c/2b5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=101186&instance=softonic_en&type=PROGRAM&Expires=1462476362&Signature=U8iUbWZj-7i-fmwo14fCGMl35M1CJqOEJCNXM9tQ-z-0Lnmj9Yy6JFys1bqPPHka2VeywuMCgF5~KgY5MTsChAQyoSs4UQ7JTu24H7xQwy5ItTqgG659WUbaSsHgeuQkDRHkNgqDRM5VEXMz3DtfyKjEfDPPPaKqZK73fGeD2mQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setupbridge.exe

http://gsf-cf.softonic.com/63c/2b5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=101186&instance=softonic_en&type=PROGRAM&Expires=1442191188&Signature=IUlxJNVtDm66e9NjCucJMA~4fkX57LHa9pflBsT1mr8wWqQPmuTEKz1JWxkHaCOcwPmS2VFbrMROjOCZRj7gzfjHO0yU6tAl-EmBPNGyS2yHQJjY83XtR34gN79libabtJqKWu-kp7qtWN67VlTu7Oh6QWSXBxRZuyO1LOHrmc8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setupbridge.exe

http://gsf-cf.softonic.com/63c/2b5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=101186&instance=softonic_en&type=PROGRAM&Expires=1461386847&Signature=Wkz-UT6byNIhXSg-Hd5Ma3TVGex6tctkotrh-SAlR0XVyyTTQIJSVLhMAVjdIZ~ipqjDR3cyG9yDNgPi7xhQu2y1TP5gUs6unSlxdTk-nnkbRim56vkL7rJdsHP2vNAfmvAQooHPoU1AK-Sasg5qdzDc0qr5Ls~U3tfn-MDbrUM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setupbridge.exe

http://gsf-cf.softonic.com/63c/2b5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=101186&instance=softonic_en&type=PROGRAM&Expires=1441982056&Signature=Rdlhfwi-~534GpOFVE5KaFVg4--zDcvcSkNz7BJ1~Vyqrtb-TojnHPeJIpA4UpD66wH2oV~-cDpeOZkcwy~LSFUHBt6vzVFhY1FjbF7X2m3PLdkoh9Vk1BoFB9f-iu~K9Fvxxf3zBuVtt~hkzBZI~CEQYVvcYWxVyirrCNSx-jI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setupbridge.exe

http://global-shared-files-l3.softonic.com/63c/2b5/.../file?nvb=20150119135838&nva=20150120015938&token=0789d4dc98af6e8f8602c&SD_used=0&channel=WEB&fdh=no&id_file=101186&instance=softonic_en&type=PROGRAM&filename=setupbridge.exe

http://gsf-cf.softonic.com/63c/2b5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=101186&instance=softonic_en&type=PROGRAM&Expires=1423834618&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YJjuhyEiTw0y7xQ344lcMzzA-ZOYONcnzAeIIJnxVpy70hYXE26hyPWUu8ozkuTMNyg7XIqxE1kbA6u4Vf7L7~fPSZeHJ0G44R4EPdioUzLaRgzdrHPDGW2mQaAYNRRdpdTgfxvyBFpBS8IunqUEYEF~~SI9vIJLRiFnXJOAhSo_&filename=setupbridge.exe

http://software-files-a.cnet.com/s/software/13/59/98/.../setupbridge.exe

http://global-shared-files-l3.softonic.com/63c/2b5/.../file?nvb=20140620150905&nva=20140621031005&token=0b66eca93e683786af4ef&id_file=101186&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=no&SD_used=0&filename=setupbridge.exe

Scan setupbridge.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.