home

social2_lite.exe

Social Lite

PremiumSoft CyberTech Ltd.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
GrandSoft   (signed by PremiumSoft CyberTech Ltd.)

Product:
Social Lite

Description:
Social Lite Setup

Version:
2

MD5:
64f62c19929fc892f233ce7d23af701b

SHA-1:
39eabe18de488eba110ebfe318648dbe8409839f

SHA-256:
49931f4b5bb688014893e641e626990dbc78cb12ca3178be7ec36fefc1d27a78

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:41:28 AM UTC  (today)

File size:
9.8 MB (10,287,088 bytes)

Product version:
2

Copyright:
Copyright (c) 2012. GrandSoft

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\social2_lite.exe

Digital Signature
Signed by:
PremiumSoft CyberTech Ltd.

Authority:
GoDaddy.com, Inc.

Valid from:
4/10/2011 10:09:38 PM

Valid to:
3/22/2012 10:02:19 PM

Subject:
CN=PremiumSoft CyberTech Ltd., O=PremiumSoft CyberTech Ltd., L=Kowloon, S=IA, C=HK

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
041BEC6B7A69D4

File PE Metadata
Compilation timestamp:
3/17/2011 5:22:54 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:QlvI6Z5QLrras8gTwiZnuv/tAYqGFQOnZBC90S3yXX9R:Qlw64LmH/tAj3OTCqaydR

Entry address:
0x16478

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B0, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 4E, EC, FF, FF, E8, F5, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, AC, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, AC, D6, 41, 00, B2, 01...
 
[+]

Entropy:
7.9977

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

The file social2_lite.exe has been seen being distributed by the following 7 URLs.

http://gsf-cf.softonic.com/39e/abe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3335084&instance=softonic_fr&type=PROGRAM&Expires=1483225280&Signature=g6hQRyfo7D45ElPugQYnDr4X7QDZiTsxDl5RkyXi8dkwIwzixm2FCuycUaaMa9mlRTivFeu1Y~YFeke98ZnePJtR8~HjZ8mNWC1Erog6Ofq4gZC8w~iU1WvgzRleFoXq0mi5xz4ktyBhdFEzFNkI3ThN2BjpCpD8XS8lf~3PhkY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=social2_lite.exe

http://gsf-cf.softonic.com/39e/abe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3335084&instance=softonic_es&type=PROGRAM&Expires=1481130220&Signature=QhS1eN4xjS0t4c6~TWPwo6bAVO0drnfmLyl6-seOHRn~MrriaNqEBmvJnvzRevgTAuwuxX7wsfWCceuhM84e4UlNr06q-m1IoLdbFpxoWC4qrwhUAvf-01bbKQtrCr8nI~EvoFDBQsOhY4HWg5tvqJeUPvcn88fnLBK7JthMBzI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=social2_lite.exe

http://gsf-cf.softonic.com/39e/abe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3335084&instance=softonic_fr&type=PROGRAM&Expires=1459806464&Signature=fu1r5EdcUrNlKQYtWYWj1K0TGY3X33d21vjeD9PKv8wbvAYqA0lEfYHLGZb44Q2kk7H~fbIUAAwjjfRX-zEPnyWsjghYh6jijxMce~mIMPfoM5qKWrq7XZV~lmd0mvjZYge6rE7ObXIZgj5hzNrngPac1Jzs7GKlA8CPthPK6Lc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=social2_lite.exe

http://gsf-cf.softonic.com/39e/abe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3335084&instance=softonic_es&type=PROGRAM&Expires=1480668153&Signature=Lr2JdQP1O6VYF8erdWjjO8HOmsUYnlROdaNmrcnXtqBYXb1VZsC5iAcZ~L9AwZguLY1NyIEIortP3xmQqKXFRqFPy693RhwsMnPvjoElAibJVv5CylC6W0Wgse3JNxuLSOjOkrXKi7eqQGcbsHs69QBjEDuOS89JpKdFx6vZd-s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=social2_lite.exe

http://gsf-cf.softonic.com/39e/abe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3335084&instance=softonic_es&type=PROGRAM&Expires=1474363052&Signature=ZxH9UKStoZKUwJVQTjTvQQ-wkV0g~ia56dXWShNCVQM~wYrvTOaH5o2FSuh4M7iLktFdn4~nfXSly8ziUXEz9sWo6j9A5l5~Hpq2warNeXRp170IsgIsKsTiwYC9tbf2XK-0uzUR-sNhaO-anctgCjwb7t4TdWhp54zUzx9--GU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=social2_lite.exe

http://gsf-cf.softonic.com/39e/abe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3335084&instance=softonic_fr&type=PROGRAM&Expires=1453185783&Signature=chKt8TSigPNz5jYcAJ1wA0xTMGxLpboTv2lg-yajvEM3s8uGqjCFwq2K3A~~EmBjPlPEDymSQ5j4xkHk~2vbqU8rAa-b5phKz9b9hWhlTiBGm3z6HD4NLFiBAT3jBhUlF9eYB2Owr-KudmDhmPYN7VZg9vBHCfX2-Zl99AY-1fQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=social2_lite.exe

http://gsf-cf.softonic.com/39e/abe/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3335084&instance=softonic_es&type=PROGRAM&Expires=1456414074&Signature=BbzZYSFWI4ogTsA8IPZElXab32eETCTjzZ4QPVSw28ZpW0Ipu5s1qU7-~kBWBZhls8WhRR6AtF1g2sjARMBux3m8qlAccNLWA1gBQK32StFCOdGDtgQI7NK3tKXEuNhYn6HbxFKSfl7oYe-gnHkt5UMeyiEOrNuhsKYpyza~A0I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=social2_lite.exe

Scan social2_lite.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.