home

winmail-reader-setup.exe

Kopf

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Kopf

Description:
Winmail Reader Setup

MD5:
44ffdd21d73bdbc981709017a3152116

SHA-1:
5cdd78f23f0fb0cc363377bcc2e0e2c8c107e1f9

SHA-256:
97f463b2a35653546ab0f7a135a4907b8ba04bb3b65b11acd46732bc8008251b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 8:23:45 PM UTC  (today)

File size:
681.8 KB (698,196 bytes)

Copyright:
Copyright 2006 (c) Kopf

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\winmail-reader-setup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:Rmz39dIPMuBbAYTM6RUJNXwRtqZ3TwLIXjoTXpPgD6fJ3Pzv6Vhjuw9yLFAF:RI39deMu2cM6zLJpPgUJ/DEhCw9KFAF

Entry address:
0x97F0

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, D6, 98, FF, FF, E8, DD, AA, FF, FF, E8, 00, CD, FF, FF, E8, 47, CD, FF, FF, E8, 3E, F3, FF, FF, E8, A5, F4, FF, FF, 33, C0, 55, 68, 9A, 9E, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 50, 9E, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 5A, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C0, D1, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 87, 99, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file winmail-reader-setup.exe has been seen being distributed by the following 23 URLs.

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_en&type=PROGRAM&Expires=1432181424&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=N~4zD2apU0xBxymx32MBTcOFen9Zkk~TA4ibJU-oy-H7v0Yw~EQrSwnFi5t7QGGOqRA46J06lUM0pJVJd48Snua~pSXqqdDRkLXZiaH7fREyq7k4rwefmu35jSYCgNo5WE-2dus67iyNYuaiVmSNwmvdJ95z8wNE1gTWOmfI4bU_&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1449222104&Signature=SvT5HjuLOa9qUOvlMyfIaRfPAG6t5SP5aEGwhGNFqOo422hEUdN0NTjg526DPElpcmNWjr7stKt0M01MJ1Ft7pfwTS4-xm5y-U7QS6MEdsxu~uPll18wDBkIzj-7h3ytZz-XNHRz~m5x~KVPMzsT-1PCUT303GpejZL3dyb7i1U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1456147254&Signature=AKRi7mPPMPjZIfoV~aFqJWvnDZ84uxbfc6lKK2HopYj59fxXCi91ailAReQhBE~MDZqw8UYypvQ4qNJiFAQad27L4yjH97OEfpziaRwTXtns8a6zdaWuSF3lt0~~z~aUVtwmhLVZGOUMSlvq7TE2ycdpJwbSNQegL2xAhCQbJZ4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_fr&type=PROGRAM&Expires=1477437586&Signature=KFRH3TmOwnw9vTFyG1kLudwKciSQZPnJvmx3dkO9LpGupxA-WNLV3SCfyaA6ldcdysRzlCC2Qk6tSWV2y6YZl2UBdL83IS7mLZl9apht14UxH4DvJUUFrl-wNLNfTu9Z6-zxt36aaiycA8ZgrYcyaAN5-JgDor5Hu9yQmsZTbs0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_it&type=PROGRAM&Expires=1468954591&Signature=Pf~~Ni7xa0CPHBhEzKqujL~S7OWFKzd6VY3Jd2XQZAefQWTiSBJnbTr8WovHyWOH~fvVuzOlv-TKmaYTtn55r7CPQochgnLFuTSvzuoGFXg9TO~WUXNPwafc~ApS2Zvc6zmQdwlHNd8gkoPcKV2ZcxfrPrUy2kL3PbKqZZc5-V4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_it&type=PROGRAM&Expires=1475713623&Signature=G459n~HYwuLXPWd5t36jXxE5sGyegrAdTGIq2xVUUVPjk1TULLwFhoqerAys70tYo-6p6yjsPF2jSQadBKGVA50Xbs6UyzJZLUjLl1ypbnwdm9t7y17vYrWyDXad6NDjR55Mjav4VBlPtu5VJzGWCK610aT~WxEq5D~JaW059Bw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_en&type=PROGRAM&Expires=1441852819&Signature=iaU9FlNSxf-z3ctXgBU5vHu23BSa-wl2ORzSoXPRrV67rKpYqBqZD3m8pSwtIJgHK97Obw8sZgvja-UMP~WO4EwsXXWuh-vbJE4ulh1emGkB3vYMil0olxE-zXYNj-yr7Gnn0cY9yBANN8eMLZpmpkK1LksxDV0J9OgFNyRL2gg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_pl&type=PROGRAM&Expires=1472063966&Signature=XQByceC5n-SGzIMpXn2o~rDlDi~XK9A6oMZqnnnjQ2QB-gb7P0kXDM4iU9ncw1ZXIx5prkO9-ca2RHqIlpXYT-x3MaN-cTMl-l7CuCW~ndP-XuJSjwcBmkp92piKlWLOJmeFD6wTAQxABxLHVQPI5sNc7kZfOkrgZo53i0Top2U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_en&type=PROGRAM&Expires=1457077990&Signature=ETylEnGdIOBkPUdGuDWsL5iWdugvSOehNjIjb4x9HtPhBHZY69hTDL~Tu16Tk51QqF1dfLsvk3mmgsicEkqpXAdBD-1fuhbyVGmXam0XDlrSHbFuecpO~YIIHy5k1~VJJgUDZQCTg~4sRnx-cf9DYeFFy8MM95WpE9Tc01KfUFc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1449511639&Signature=ZXcaIQNTfROO3ZYWOIpeOpdsmhWUDKansAj2hTTnoo8Z-6Q~38TGog87zZWnSfdGnJE24TriEJmBoTIWjzFBJ7SHlfUmIEfD~jdzCnJM2rZKbmv1UVLQ7wDuv0-wrYYQIO6nG7BiBzv1pDIlytxbCy2v35hUqNr0ucPhJa5PWQ0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1433237473&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=gbahDa7dVTJHwsEJs7rkIhQRv85GNCAuuYStQOGFaZDCTniJwRxy2nOr4yuXr0SBZ-aPCWqXN5QG~VrFPEtW8CHT9fycpLjJ542veCqTSFCVIM5bs1jLFzvkTrlzylD~cOI3W~LMNfXQwxF39SvOmkbg990bU1Ejtgma1bzUhBM_&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1448662222&Signature=eFFw9DPUeWUTbFKMDEyfnCKbHp55oBXNv4VrbXOzGWTdhu~k7zyAA6Y30TEpqytZEsbybpg-FYlX2vedx~gx45yB1hKPcirrrEY7hjnJSnt7p4dBl8QDHDFzP3bgn9JE1S0j57qhPFz3iqVQPA-XSm3gYV-1aRJXrBcIta7Hi9g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://downloads.ziddu.com/downloadfiles/.../winmail-reader-setup.exe

ftp://zebulon.fr/winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1428752136&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FXOwSPo94z7qU4T2BWiCXisnFIvKjOIdtCUw~wz2fghkzIsL22ZC2kqKVRbA8KuG-Pxfu3l7DJWxZlLbpcMc0ViBltX9Zvr0jGiMLQdXf2z5EZ7fdsmfWq2jb5lgY9Nk7rzBRBvbKEnLOtWaQcl2fOaC9E5oNJ7LzeCg1zA1eU8_&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1441694205&Signature=AKkGVxo3K3xy-7bddet7sj9SVjxD2fVKVF9kkOduC7MoSqQ2F0TVTTbtH5sh-CiYoepn9PWYG9CXxK3j~ala-2hVxv63Vug-BhdPRGXDyRWgRIo0A1mgZ1IGsH35igiVRjlkHRi~B2aaMpJiV~I2EaXBiemx2qt2FbSu7szNnd8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_it&type=PROGRAM&Expires=1424134437&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=EHEgzg1KuRbCMARmiwOn7IizI5U9S1UcyoP4Skx8TbvafNnQMsJWgeQIKzrdTZgNweaNm-uazTgi0Lg6B8ygV4~vmD3QIs56rAxiDjOST27uExJGBFa3RHP3xn05cMzllXB5byc44DtANdTTuOR58mTl8Ayczwpp4Lj7RAPXgTw_&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1454053183&Signature=BZxNdhWRFIvZSkfIWs53LiN9FWiy3U2vYJmSmxjxgYXbQ5KH-m1ciblSLGGxOhNG-obEfOVcmtwnb1yDfylS8lZvtm24pDF~cHSsJ3kvpAoksV67C-GS7HBPmtIReZD1FRSStbb5K~vVEkX-qys3i94o3ya1EXyut-wutpQcliY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1449261403&Signature=EF04FV3TYzmjYb4PGcZWnGv3uY8bjyXKlEvwwS~pIK3NlHkLbu1eCj35Z91CEOjeaNL59absYyGi6CMqXMC2CxoPJS5ZFcakAhwRcHTxLigEB6Vd5RllltvoCHjAIOrQXjAZoNKXyzdJAHZmVczhvnhRzSfadnWitGAJKhftjOY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_es&type=PROGRAM&Expires=1447197773&Signature=bgQJdrwwVEi7cjWD0oDjxCD1aQvPnrATMh7eGM9akNTQIZqo7U0vy92vP5B6abQ7aOmKKJxR2atT3oqYkkPRz8k3sUwPH8wem-tNnU~KX9e0BwVBpaOimQTxwS4miz632KqoleB9yz4R2AlEdOBMQgKqy40MkTNt~0GwW2FTBZA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_it&type=PROGRAM&Expires=1429812605&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=RfR0FISjdKuBqE8IjIRdkJhzU7s0Pm59n5VW940kD6xa2wF~PZIPEFncVMEg9s1LEiA1sg6E1BUaaVcucBccnNMdfCJ0pRGITWav7oZiyD8o7ByNZxqtmAGZy3hGq3pCL9DnMNcgZu-X0UOUFaJEgrSS~TPgHa0e4vKu27Rdi80_&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_it&type=PROGRAM&Expires=1435258419&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Q8kW4igQ3ok4SHg-lLNIhxXeq-gILpyzK2Bl2cx9BpAbgp96DDV7T08z5sAiy65g1Siu~84d68-cHV3cl0EP1Un64Dx8cQYIFbjW8ha-epkCsfauUO6dpNDAjskTY4dt7D~d4D5aG3xvn~QvYfqqY-GPz9SivZDXES-j8yUPe2I_&filename=winmail-reader-setup.exe

http://gsf-cf.softonic.com/5cd/d78/.../file?SD_used=0&channel=WEB&fdh=no&id_file=321811&instance=softonic_en&type=PROGRAM&Expires=1423162649&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=gzIGt1oAU8aw1-T~pHED1oUeYxuTQKKsXE0N0MyONWPqt30DbCZOdBL6PhWKyq5lGCZs8Vunvls3YvUG7oCucBizOFzYiebdcD7O5G23H5XiKyDs2jeB59GtN5j-aXCuDusHzv0qyn7xZLw9ZLnrUp5mQRRCvVQrAddG-~Wn624_&filename=winmail-reader-setup.exe

Scan winmail-reader-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.