home

timeleft_cn.exe

TimeLeft

NesterSoft Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from timeleft.info and multiple other hosts.
Publisher:
NesterSoft Inc.   (signed by NesterSoft Inc.)

Product:
TimeLeft

Description:
TimeLeft Setup

Version:
3.62.0.304

MD5:
4537ba277cdebfb8ba74687158871891

SHA-1:
6132af4a045ea87a5c2d8bb3247d1846e8e18621

SHA-256:
7928d30c4361bfca961c52049829cc3a2229863e62d7b41be72eedc9c0e61cdc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 4:35:10 AM UTC  (today)

File size:
2.4 MB (2,473,424 bytes)

Product version:
3.62

Copyright:
Copyright © 1999-2012 NesterSoft Inc.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\timeleft_cn.exe

Digital Signature
Signed by:
NesterSoft Inc.

Authority:
COMODO CA Limited

Valid from:
12/10/2012 3:00:00 AM

Valid to:
12/11/2017 2:59:59 AM

Subject:
CN=NesterSoft Inc., O=NesterSoft Inc., POBox=12303, STREET=5100 Rutherford Rd, L=Woodbridge, S=ON, PostalCode=L4H 2T3, C=CA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A056C463A4EC17466BB9FACD80ED8606

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:NqMBRhhbVp4n8IQKsH0nsI47wSpuTQZoa1MYjHRFLvCpr8W2dVR:waRhhU8IHsITSpucZoa2EHRNKSW2F

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9951

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file timeleft_cn.exe has been seen being distributed by the following 28 URLs.

http://timeleft.info/.../timeleft.exe

http://www.download.fi/.../download.cfm?version_id=64263&software_id=2134&mirror_id=0&installer=0&perion=0

http://ultradownloads.com.br/.../2,1014035.html

http://www.tamindir.com/indir/MjAxNi0wNC0xNCAwOToxMzoxNg==/timeleft/windows/.../

http://timeleft.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPUU9aRSUDg 7v0hqvPNHkQ /.../xXa3J1RicV1PHZsCfCITwc0JhANeapUxP5j8aVbwz17dpL4B7WuK0biq8=

http://www.tamindir.com/indir/MjAxNi0xMS0wMyAxODozMzoyNw==/timeleft/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMS0xMSAxODoyMToyNw==/timeleft/windows/.../

http://www.tamindir.com/indir/MjAxNi0wOS0wMyAxNjo0MDoxMw==/timeleft/windows/.../

http://timeleft.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPUU9aRSUDg 7v0hqvPNHkQ /.../xXa3J1RicV1PHZsCfCITwc0JhANeapUxP5j8aVbwz17dpL4B7WuK0biq8=

http://dw.uptodown.com/dl/1445536563/.../timeleft-3-62-es-en-win.exe

http://lb.cdn.m6web.fr/d/c/a/4bb03ccab7ea1a9f84457611db0e1e52/56eec9ba/soft/.../timeleft_3-62_fr_18539.exe

http://www.download.fi/.../download.cfm?version_id=64263&software_id=2134&mirror_id=0&installer=0&perion=0&air_installer=0

http://timeleft.softonic.com/.../trmsvRChbxdrflJq3ZIylWuQNUg8DX 42E9y4ATashVeq0rbaoc7M5Dv2pt8I EYQzXoZDn 728NQ O3QQLFhKsrXmeNxD9DsI3MRsNT1Q9ofD0cnAGidxZ0UZqcphkTtMfOAYUdzYLEdpdgkBJ8sBU=

https://docs.google.com/uc?authuser=0&id=0B6FeeOLnpeOAN0tfLWFNem9VSFE&export=download

http://files.downloadnow.com/s/software/12/87/33/.../timeleft_cn.exe

http://lb.cdn.m6web.fr/d/c/a/757cc7c2019b452019dd72ce10199862/56c0bb6b/soft/.../timeleft_3-62_fr_18539.exe

http://www.filepuma.com/file/1411997352c2390/timeleft_3.62/.../0/

http://www.filepuma.com/down/1422118630c2390/timeleft_3.62/.../0/

http://www.filepuma.com/file/1422118630c2390/timeleft_3.62/.../0/

http://down.filepuma.com/files/alarm/.../TimeLeft_v3.62.exe

http://www.filepuma.com/down/1415646963c2390/timeleft_3.62/.../0/

http://www.filepuma.com/file/1415646963c2390/timeleft_3.62/.../0/

http://vokrugsofta.ru/.../download.php?id=3730

http://timeleft.software.informer.com/.../

http://www.timeleft.info/.../timeleft.exe

http://www.nestersoft.com/.../timeleft.exe

http://d.computerbild.de/downloads/.../timeleft.exe

http://software-files-a.cnet.com/s/software/12/87/33/.../timeleft_cn.exe

Scan timeleft_cn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.