slsk157ns13e.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
84a80f8bef8e192e0189a847f98c213b

SHA-1:
4f57e643951e6eea333d6dfd584b0c01ec62cdec

SHA-256:
9dbd84053e45b5cf5b67b4c418528febecc5ac15873a5faab1d65bbba15d438a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/19/2018 9:19:04 AM UTC  (today)

File size:
1004.8 KB (1,028,938 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\slsk157ns13e.exe

File PE Metadata
Compilation timestamp:
2/21/2009 2:46:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:7Arg26/3ds7Qn7rpY1bzKLNFsYpHGtn/wnW2xRAR5ZJoIyp1VCZ:0NKtP6zYNiJnMW2x8Noh1V2

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, ED, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9915

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file slsk157ns13e.exe has been discovered within the following program.

µTorrent  by BitTorrent Inc.
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version.
www.utorrent.com
12% remove it
 
Powered by Should I Remove It?

The file slsk157ns13e.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1473874924&Signature=eEqYJ4bh9ypQVc-r6hd0OEZh6d-URjRchA5eZvdd4zRm-shLAQwp7P89TlObjO1NynmvHvQ4bUPnW3rrdAOBGDLQjMHjM4AkBYh4~Abm-FQbyqQPh~uHhvzZitozTLOyCGcQG~CEVoiBQxl41gk9S3KxwKtxvbGT4eCdvDwZNdw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1455261415&Signature=PkBEcX4woDEb29EZ0VEuDKGHNssimVXtix8oucxM-N27v1VdbAI5JD6iO6Px~Es~uuI9lw5An3txYtEplv27KNKo5A6mp8fftKDFbXBYwo~0eFvzFzWbqq3tiSNVJ9Q6ahnsKRhVoXdbpNTSC~5cOv-YIKpgSm7685-1rOmPWFY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1482645518&Signature=QgNPqeiVBKcTUV7aIfg3PfdFK0ZLqxL4Be~KkkiRup5VCexBQPT8RCGlinrS9V~uh-S-u0Yqyygd7i4QbhGxGAK4mOf~E1R45XiUuplJK-Z~qug29oVepdEargP4ckZCviClQDJIJeufdGJSgeH14k7J28dcwFK2RwWcHp7Ehvc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1467682355&Signature=eu5UnQud7FeR2XX2pgMiuHbFnhjySWgs7n-Cmgrw-8RpwK-uLhQPtpi9jXveSLKogsRN6Q4iO29ZSsOM7S1V9NHUwFnT40SLHSGVwPhm09~0xpbf89CW~mGVAOnVr8eVwOqNnnLo1nvHq-pQuMM9STOX3k1fEo2GoH634Sf6R4M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

https://soulseek.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAO7ssCxytyg/.../2eWF8=

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1440283264&Signature=VsqWxlVh6nH2GgqG1jRcQr7xe9xXVTy22InvNrtt44MCR7UGgb8CMVioesHkJHeONw-ygk2NI6d3obsYwt4a53GVQSiLGJ40I0Cy4aoAla69hCGvLQMIaSo2cPlEnOsfmJSAcsX4EnpqFNdoqdNnLcM7buFGCea49v6ZCpsiTw0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1486720739&Signature=T4-zsvj3ZsF7hDMsprOK5tORcFNn9FWWmtAACWm2RxQF-fQTo3L2E9S55ipM52DgTW6e~XsUoqXxTcxiyuyJM4yl63psf8yzmjhkqD-hP8aybDQ6iwn9-KLghHVSUCoB-p8CN8hJ9VKk284g~EUz370BrviO5lpc0zdbHK8caPY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1455476898&Signature=R6lvqS2mcSPi6Us5D~gt41uIpHI90~6zQn7TgoiDuyU-R9Da5EgPr~qNXtR553EGa1w75OrWutOfC3W5Hy7pft~B0PEBtjGUxKHeub9NBPKisibnq0AmYjqbpjs0ubuQpwePJku~7KSRe0zT8eA0qdYrokd2qQTUZJ0Qr-Yjfxk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1461470893&Signature=MiIsPiTZGQov8UrGL3Kd92-5IFLc85jtBLCKgQPJS5j1rRO8fEAfYQ5Gx-tJyiQ4ewQrFzBSBlHertQBOkjqTIeUTspBn~aOIkrKDk6GRuk7dYkQLk7xaXYO1wytQ3OnsUcplbaP4rRjuT1IRGP0YSdkd7LeUrQek-7KmsAUxUY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1486955230&Signature=Nt8VDTd4ZAnlX3ZePsD1OFjM7B9YgIwb~SETJtQfYACGLB1feRMe60hBBUzm2VNbbbjy5nWmzt3qxfykmlQx4pvltTUEGAQwqP7KYZpkhPMqdRbPQkjU4YL7MDzL5qCytJM83LAHIEdkYrsiFe2jqGpvlRs1GfdKRnVN081KV~U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1462085491&Signature=VWwM0T2TzrtM1p8~jYwh2QpcFiTXDioJpq1U0zx3v2gXOCbW9Q0hFA7Euvs5yMkfJT0AeCNgF8FJZcALHD7yVK8Wq8hdYWBa4LeF~GLC7PUFADNbppVqncsrydPiESe7Zf5IM0qzjDHPFyhXc8h8ledYEBjO-VjsLqWgUELQrV4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1453020830&Signature=ei3eCcVjkOcI7UZOP-hwLHL1eDjkXmNxsnEgw2l7I9mqdHNZeOUnFmeOybnVdP7mnyeqQnL1ho0GgCsHZVhW5HU1afmhb~U2Kt1BmLySFJsUjsp1QwSkbEUxmrZLXwS5E-1g~S51P4apS5iKNs1-o322mQHhPIc4EW1ZSHkvrXw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1469445064&Signature=IASiL4sFWwvPjRYkQdqnywemcaFu3xZk0vsF-Qzt8z4~yxdHyDsTcPNG0KXSLromOMwr-Iaf8yKJQHZqRBgPscr6jyVZS86bLsQ1QhhFgzUc7eXQDh-MBlO9Fe0VWF-qm7ONya3Y2H3MiPT8-6nuHz3POEr6GOc2xs9CiYYS4KQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1456907925&Signature=A-TfgHC4UIzLbqB64Q1WNenTH84DC2l-nJeuLf5GVvRjrYZ8hPbHn070Vg3OLTBzQ8Pec39KmDldwotAnxjrIyzQFH-HjV6RHHEt7vsKjldHUh1Zom0LJ9KfexDPm2-8iiAtNVxM0iqDBX35z34ejxulniNFo0yGUZ87PsNa5wQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_nl&type=PROGRAM&Expires=1482312230&Signature=R0ahNh3P3jzvPz-qqZRdJsTQPjOjL0OO10HdQ1vrb5cpYEEeMyrzy8Ggt9jDMVOIHcyvgXxNo1OG-ivxGLagGcSCJxM0dTgGCzfbD327CrsHbeQIz5OQ3rKiTefLYQghdddJ~2NUbVaV-oQAgrkGgY1mLrBuI9uVB2M7aKvVnQE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1469183696&Signature=Ch-awoonRtdTb6eHh112XJNyGeLpJM3YuNk4~XJ1Y6M~R3syDa5rW5Dn~hhoAK~eA~Xif8uJ-Arq4qlM0DHpheFxl8J3XhaJRRevJVyDxhjog2uGPPkZVsU9N8pR232TZF67gQgJVZ-4FckKWNTOmzUv6f82WAz6VMWpy3u2eS4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1476740380&Signature=HARqptG8iTfiCKZ2zfPUGSO3vESeNhTZUxepy2PpMYJVvvWU-P1XWqa2OTvq4xUqFN9ZcUfbvsp0xG8aEot9ouQ02BZQ4mhheBHiqgO9HpCsi01tBcjDtEQfe1ZGx0Tc-7oIpRUVrTVdDZQnkRfYDWODGIsKuDeCR92rTkUZOOE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_fr&type=PROGRAM&Expires=1485255075&Signature=YCDb8i8UqJeVlo~YRvw6z9icFufYy1egIQ~HQRrrjijFBLekz~AFVBgxn9SrwYnG6wD8WYI1XNafxB3BrEcBC5CgWoedZ2gzB7UK4g3PNxh7tamXaAxId58Cu90GoW1I362sjnoz-1NJKPAnWrbRkJIhqdhtXR8TGuSWdVYthWc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_fr&type=PROGRAM&Expires=1481057222&Signature=ElR2r7FCBwyd7MYLOALu5-RH6ye13U295-LsJHpfvZgIh7zHT6nxJS2a2yIuSyqr257ncv~WGpLPCfee9T~6LVnt1ddMoaq-pXCZKe2RVkr9XcYAHK5s8qAM3EQFXA462XrlZQz6yKOkuTO9InjG0I~kVHy8GR2MNaxGxNZGP00_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1435642256&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=c8yF9f9s1Qc87-rNJNgDvjQasXhsR8w7YqANP9kuEZtthqV1osMPQ3TXjXov~uUDk~sOP4-~Htic72y0J-IIOA24wMnX7j9Rel4GQk9hQu8BmDgAoC5dng8aKS8AgdOQHkRmj55~6y~HUKJdlYZiYWU59FFRv5C0vPrR68Y7WAE_&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1429446190&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=VB50fG~-2abtBuHj-KXxB1T0VlsdjD7bv4f45UV72fbv5kpSH-BkAl3LkpVXnfMz55YKmW0kwVvduaiayarsdn6Os0Drev1pWXRK5m1DLVFGX12ONpHbN7ktwdSFvHwxR2k~OPxvtyx-KWDDNXbKShyk7MipaMSNjWRaQJDXzj4_&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1439714106&Signature=a0~bjYNN40yBuNKVGuZ8pe4G5DL~B9WEyKEB9GZPv6i0yk-yR9qz8r1YV98ZZdYP05hS~tpK7z3mKjugCJthqsdkdS9kgpnFUTqQMK4wGBuAta16F6o82gXvUZCMhtQo3Gl~biccjRCtVGy14DNMhFQXTY7Y1iTatlK7Ox5y-qc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1476356639&Signature=VBkTk2jriC8f46kTau9cqDVY3vyd0eUxxf~G6KWUGeF-VBJvmym~NF8ne-ZsBm7Fja1yTmHYn0KizbWGxsh9Z0OTAWxfQjP4PnUYpEZPHsTheYXu-4h~HCC2WR2nZOy~rTvThCD9E3crMX3YEHiEkC~yhhtej3f~r4HRr6Xm02E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1442138531&Signature=B3h7D3waIoANWglAPFeJPSFsf08dZxZEqGwlZh8dQeVj-pquMGoE943hjhKVkSufo5yJvf58L3WlrcB-VnXeHaFKQUAQN3~zUyjQEcnt8fr~v1mP6NoLOw5DHuUPDfuMkmHcF4wMDsW2C21Xu2Xc4O9-6hgaZ1eYMWet1perhUc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1476347757&Signature=QTlFPE6ZI5Ape27MxPDrItt8q7~o7tcojjb5W~q8fkUbnH1Ke2dH4ycn9KIM1c6q0UvVJi8uGH7mtCuyt64avMrvxpBMQgwaDyai1vOFgSggwAAtUzj7~k9OT8Cd0clPckY3ftfY3HmOdvBYI74XyVZJDNty3E9FsTqm1X3pBK8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1479009617&Signature=OSox8shbqBTTqkfisFM8vRN0v4E3nZvFkRyEHLyxMREYLGfefLACMFJ8qP9cKa~1U2CP3nn4k5g3QkFOTp147p6EXCc8XTYmdn~ixzibv0ZUGjPb9x0gflV28UgN0Hxzs7K~6iH9PGx4T6bOZOGlDgO55I0rBFhZF087i~3n3ow_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1473852811&Signature=CSoTQoMT28lpP4Vh49m0dfEVW~z~PQi7eujqDKt4UM3TJ6MaUWrLHoptzh5qjKhMSXkX6Uul~i5w5U2wV3qjY8nkHMnvLJOWu5JdFGqXOC~mZJ26Jiaax7J6HG9dO5YnbInMjuOyaYg7l33QACYE~7jVdL9el6pS7X9t53G4QCU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1467144590&Signature=C3zovl0t6o0JL7dkdsDWKxKlUB8lYL2uKyRbs~VPzygBOppA5v2vdTMKtyZ8Tm9iGbZpbrSKYO~338E4Eaq~yuPpgzYgzAMlGk2zx~FLKoAK3cJxdS1RBmBE4U3iD74oJ93UNZOAf~ayMZGFnMICLBqIkM6x7XODk-uaWz6xkNE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_es&type=PROGRAM&Expires=1477712022&Signature=HpHocQeRsr~c33SsM-5B4rqSDC-Exv~-s~8qwfkwP-nnT3jSGCowFLvYm2e9prN9eq-5Nbc-DYzED5hKafxuj2wPsx4eCfuhBLiEemZSFxkw2yrVHAqgfJH2F6iFKtaYSVupyfYezSU4E5labZcEctx~PU82F4jNyh8suOs1Huk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

http://gsf-cf.softonic.com/4f5/7e6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=26807&instance=softonic_br&type=PROGRAM&Expires=1477116310&Signature=G2G~7WVztT0cCCVm4jRqso8UgGclXiY0ct1MKLg9t~ZDPyzxpnDzOtw9enU86hzF2G7zzki17L8N~DS8Ol9mIxJYN2KucR10vEGHGOauo5QKwC6Hg61-fB-OOVHGSn2An9V1iMA4bdNNt8zW69u1FpV0gblO7K-QCqEzETVdEfQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=slsk157NS13e.exe

Latest 30 of 178 download URLs

Scan slsk157ns13e.exe - Powered by Reason Core Security