calendarcreator.exe

Photo Calendar Creator

AMS Software

This is a self-extracting archive and installer. The file has been seen being downloaded from photo-calendar-creator.software.informer.com and multiple other hosts.
Publisher:
AMS Software   (signed by AMS Software)

Product:
Photo Calendar Creator

Description:
Photo Calendar Creator Setup

MD5:
de8e7e804957a84a575bfa046251540a

SHA-1:
c222717ee4ea4a27adfc2f0e563e5f1cd294f759

SHA-256:
d0131fb4129aefac238c0c1586433c3e03ab5e9b211cad7ae103d0e1a0f43277

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:31:20 AM UTC  (today)

File size:
45.2 MB (47,443,920 bytes)

Product version:
9.0

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\calendarcreator.exe

Digital Signature
Signed by:

Authority:
Symantec Corporation

Valid from:
7/8/2015 3:00:00 AM

Valid to:
10/7/2017 2:59:59 AM

Subject:
CN=AMS Software, O=AMS Software, L=Yaroslavl, S=Yaroslavskaya oblast, C=RU

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
1CAF3074B1407404AA1F9E278111DA40

File PE Metadata
Compilation timestamp:
7/9/2014 10:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:NSFsw41KGMzok+vj5XIOX+9ueucMsb+y5sGSuBbXPWZz+xL5sSvfq59CtqEMkMMM:gFsd1tk+VXI2+9scL+MSuZPWYxtsS6fV

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Entropy:
7.9999

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file calendarcreator.exe has been seen being distributed by the following 12 URLs.

http://photo-calendar-creator.software.informer.com/.../

http://photo_calendar_creator.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPemSpzydROONygDLMhXLMTlkesa85E2lr2EB4Yvr7k9YT4pE3ikLCbEiMIOIcFup1DqRUtEoN/.../g=

http://www.ranchsendgift.com/FC3DdKHS SBeHCri3FAfRbM4ZwR8o2sL_h7 y9bzHJ9jukWk0jP5UqgX Nk1VYRLwNHyRNNbCOZBQ70mOAtjPDER _aVLbgJ1teB3bpfxbh67bBhbFOSHwrTd1lVJb5Qt2Jblmxl 1 MSrPzq4ihNz7ylIDbJ fyoSmP7TU5JiWqZYzmLvsQ9ezfAepzfb97ER6kp8fGvtDJlKOxgQVxxYFIU2COg==-GzUAAARUOaRNZESH8pPlcNiAA4ceDxSGDTihGpb1rnGeApSqElRbyEuZ25oH

http://www.towerbitscenter.com/KFMQ6CQXm47VYxkVCyqIxNzgVKPa0AcD6l8yOUIGamwmtnMuTF7sYKOkKgYkcFVMCPOGiShuiSxgN95_OyoueSCC rEC64J1pFIjUYuGwxIn0j8hLzDztX454YBv0DJWQvZDqSLR2jxLnZZEkqZcUF9pfwZnojLyn5yfmoof2LjIZGFzgXZSAjOlDmo5xhW2tkJ3N zsbHkUFsLciAa5s 5O7DtGkA==-GzUAAARUOaRNZESH8pPlcNiAA4ceDxSGDTihGpb1rnGeApSqElRbyEuZ25oH

http://www.towerbitscenter.com/upVa55U_0rVugawrff831AxBWKVGBmqu6FlZXgdaJhREtxq_y7oGFrOp ppgPBRSKYshQem F_t2UHbpGPhZr9N3zzQoPvIxG2o3Cv2UH2qwc0YUBkys6LDFzGxq78P9aFybSceFYqOzODkY1D lAo1bIQKch55NaI3 MGtRYhhRpLvQ5DUEVE_DCoti0b_1oAM4Lr1iZGZOCmo73TLfeOhKNo19uw==-GzUAAARUOaRNZESH8pPlcNiAA4ceDxSGDTihGpb1rnGeApSqElRbyEuZ25oH

https://photo_calendar_creator.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWswuLEQ49FsUDAE5TMaBGzyH5CpHghDADZqEHluqVriSBPXtsPhnRr0RMH21250t6qzazIAunv 9cnIDnjLCJ2NsGbCwqkPq3Hms/.../p9amTtDfOh7C4Es=

http://gsf-cf.softonic.com/f42/dd0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334040&instance=softonic_es&type=PROGRAM&Expires=1478053944&Signature=OXTO3fnzF6~hqHdZMOq-r9rTqeRFKP9XxqXkfrl-1BI5HfFFqLEqF6HWTaQtbs9smLAcAhFNFMO7u31N3jRn7mKcUWM9YY1G-3IlozcHo3ixq5L8QKVcWO5cE1TAPYoqXwVsmMMRf0xuA-th4fffv-AMUMipuqj9GLyoRYh2TAM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CalendarCreator.exe

http://www.towerbitscenter.com/evW36O9c9gq0f7Qw98O64KlzI 90FIAaICV 9xtg3XINFY_Bk7eN_jv57I_aMGLRS710VxHJiX_rOP8Vi9Cj_VT0LIfbMI3IuDHnRCccPq53hrgmaZZaAKMV2VdpBpsio_ep_Q9hfSTD7YH6THFKkLHoI2YhFtPyEZuDWwPmVwJsjpOI4_uclbpDwSfCbJMF887WcGnTx4s4pK7wbvk9Q4Ny8sdmBg==-GzUAAARUOaRNZESH8pPlcNiAA4ceDxSGDTihGpb1rnGeApSqElRbyEuZ25oH

http://gsf-cf.softonic.com/f42/dd0/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334040&instance=softonic_es&type=PROGRAM&Expires=1473400076&Signature=B3SXchkl4ciGisooZYz7ql5oChmezlCZxYZ7CRH2sGYTpYbIqlBwxCK1R3JnT3U~loyjlXhTZJ0xm7u-cScYAqF5TpZnD-TDUUQC1FjVB-7oin70blrURr5PQXvCxMNfVXno9F9u8ZMd7fwjk12Xbpnk5pdvXD5xErLMwKcIXvM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CalendarCreator.exe

Scan calendarcreator.exe - Powered by Reason Core Security