home

software_update.exe

The application software_update.exe has been detected as a potentially unwanted program by 7 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from files.getsoftfree.com a known adware distribution point operated by Air Software.
MD5:
ae5f8422988b44d0dd39ec0d9150d5a0

SHA-1:
69aa67cc8a7064b4919bcdfb088d4e539dad84ea

SHA-256:
5ed676b06a6cceddcaaa7a9ec471c143d4984674484766ee2bc254c046b58154

Scanner detections:
7 / 68

Status:
Potentially unwanted

Analysis date:
4/23/2024 2:14:20 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/InstallCo.zka
7.11.200.118

avast!
Win32:Adware-BZI [PUP]
150101-1

Bkav FE
W32.HfsAdware
1.3.0.6267

IKARUS anti.virus
not-a-virus:AdWare.AirAdInstaller
t3scan.1.8.6.0

K7 AntiVirus
Trojan
13.190.14599

Kaspersky
not-a-virus:AdWare.Win32.AirAdInstaller
15.0.0.543

Sophos
Virus 'Mal/HckPk-A'
5.09

File size:
852.9 KB (873,332 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\software_update.exe

File PE Metadata
Compilation timestamp:
9/12/2014 3:05:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:ByXVf88Lbw0DfdONudfujlI5ZAUxx0OGRk/g7+H5:MXVFg0p9fuIDAFR76Z

Entry address:
0x2A0B60

Entry point:
20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 0D, 0A, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20...
 
[+]

Entropy:
7.8695  (probably packed)

Code size:
844 KB (864,256 bytes)

The file software_update.exe has been seen being distributed by the following URL.

http://files.getsoftfree.com/get/click/.../?uid=1410811387288_1410811386105_128_29827_122666674_1&sid=ADV-sft-555&filename=Software_Update

Remove software_update.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.