home

cossacksdemo.exe

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from i.download.idg.pl and multiple other hosts.
MD5:
ebd47c4ac1a74b1d379058bb33b6ee06

SHA-1:
e7c26499cd3fb357b17397ce3d8cd6e96fa410fe

SHA-256:
da4c350dcaac48416f77091823604be0970da1232cffcecba22c6d16ab853eb8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 2:10:26 AM UTC  (today)

File size:
46.4 MB (48,637,051 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

File PE Metadata
Compilation timestamp:
4/25/2000 4:37:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:gSAVHCVdmO1fK23SYbrhp7xOv45MhmJnWA5lcAspeaUtZSKkeHcU5l4EBgmLi:vAqmiK23SYXf7xGaNJh0H3+MK7JtBgCi

Entry address:
0x21AF

Entry point:
55, 8B, EC, 81, EC, 2C, 05, 00, 00, 53, 56, 57, 6A, 01, 5E, 6A, 04, 89, 75, E8, FF, 15, 54, 40, 40, 00, FF, 15, 50, 40, 40, 00, 8B, F8, 89, 7D, F4, 8A, 07, 3C, 22, 0F, 85, 90, 00, 00, 00, 8A, 47, 01, 47, 89, 7D, F4, 33, DB, 3A, C3, 74, 0D, 3C, 22, 74, 09, 8A, 47, 01, 47, 89, 7D, F4, EB, EF, 80, 3F, 22, 75, 04, 47, 89, 7D, F4, 80, 3F, 20, 75, 09, 47, 80, 3F, 20, 74, FA, 89, 7D, F4, 53, FF, 15, 6C, 40, 40, 00, 80, 3F, 2F, 89, 45, F8, 75, 28, 8A, 47, 01, 3C, 53, 74, 04, 3C, 73, 75, 06, 89, 35, 58, 53, 40, 00...
 
[+]

Packer / compiler:
Wise Installer Stub

Code size:
8.5 KB (8,704 bytes)

The file cossacksdemo.exe has been seen being distributed by the following 50 URLs.

http://i.download.idg.pl/fannef/aeac7a05066518d4879a9850aceb58b1/5807bcaa//zx/cyberjoy/dema/.../cossacksdemo102.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1481503509&Signature=DtS6Ce7D150AnjKbDcb3Dtz1hyQ1FYiI8uPhvO-7Vmo59O~5yfjPYdYGVejY9YWj1AdyArIfouGPZsRbV-S21LvsTlwtLJJuGdd0pODLYkXkhOwq~ltRy47VGQ4ZgJfZfljnB0xKotggV8OWTvTWHOekpu~y152GiED-eGvQvgo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_de&type=PROGRAM&Expires=1483496171&Signature=ATp4bbjMvh5oGTnl3DzbV~IoqtvSS83RUf418D2p6lb6tV6kfMCYbRb6pMy24FB7UxD3IqcBjhy-Zv3GGXGSjzf8akUxElNi-rQhRH1XmxfHac7d7ER~~yJCNuk120OPP~XYuSOupuCFnjz5k8eeBdjhzTeGhkLNlgWFN3jPrs0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1487371412&Signature=H1Il8ECKzzf6iyca~bMLlKw2RFuJGLybVgGSpgfLnn8qh5HurQoMPRPMP0zEzd0zr6LYnYXo75WucupQoqOiuwY6vkviG0cfC~wD5YXFpTVUkALJp5JU3pS4CVQFoM59wZkSi9bg8sCR0MFVml9e05bzdFyFATjQqLA9PofDqII_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_de&type=PROGRAM&Expires=1480814792&Signature=TQaDsf~SsnzK4Zr0pmlggYn7a~UdYNCsygRz9a6rE0xdIP59R9w~o3RaJCZrZ91qTvT-zoO-xOQPHKkgTDsf4C7V~emYQ13~KbReOmdZcXbJIs1tchJ2tOaP8rT0fyoDaQFzXtGXkfEZp0WCUrKOZ7qeBhpG~6VbX07Gh-0D-x4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_fr&type=PROGRAM&Expires=1485220150&Signature=hZY7O7aRYwEU579q5578X77Lvwd1VWKV9LpDSyu03aMwv7oYFspAs7KTVLQA4hZzpnNQupuqon7zejMw~LbEjiUON07~~6S4832jPQ4MTv9FiAhtbzqn8Ih5MaSUlZ61l~vTZVYmfCFw8~~BQmtRk9MfMO-YZm6TApxh-Xk2q5o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1478503092&Signature=BgsQP1Qb9d5~XDtAYndb7S3LQ8QmdT~9gh4BisuiLiYY~Q3CNeHZ8P9kNF1qb~M45FXBEQCaW61Lc0iKExYvPKDNvSZHv1JqhID0y~tDLn7UAZPe4sCdZawfJ7vQ6OSEqpkL1sxHY13m0WyNoI8QtCl8Id4Z6pn6L2TCwqRDXzM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_it&type=PROGRAM&Expires=1475727640&Signature=fLOgB1meOalIHfjVZi8i1UoU3CIt8goJB1gMw3RygueYWdwtdevBXuvMRbE2IIMXDm0c5WH-GF2~JM0QbGdoTXqzHgaUTcbv~WjvgdsxPfhhC4ekKTulPneDmi8swc1AXpDVMvlFv0VS6Ir15OAHBUTRereCu0yNKSsh9-AtSO4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_pl&type=PROGRAM&Expires=1480445010&Signature=fZ~nPa0f~7X3IplXxzlVKojlbq7ZYlYiZEUXqvIo7oSpbGXothJObBhBmGFMFXWsSfxdPKZW0NaP28Uxy8WprESL7MFyzikxoCNJNvbNiM-Z2d5RvPRThPJaRNaZ1QlYwwwZU2-Jqu6gtKW~gjhKpL3osfobuhou4w1ZqmdoCPU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1472102116&Signature=IyUTSX0LB9MDCJMRpFPgIsxSQGKKVezdJbvKXXf7J2omzksba5I4p6FEI0Wdf9WDF42vXXxBzYikymhSbxaDORlWomOL-577Kyc9BJxpAlh8KBuESckM5G5gIe15x833d~9kiV5AyEmNQUOCdqyRJqb9HNbY05MBekHufsJOIEU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1484646625&Signature=VjzMRHNUqa3cq2MEIGsw-fb4g15NmBAbLSpXQ8xm5LTc9s5wNt9FeKph829YoJwA0nvQGIm18kl~PWxzaFjTNMjVF0ABxtKgtEHucdv4UDB9t0zU0~TJmTWRDe24rT0qFI2sva~z6lNJ3ExHt~XwwLznCfRvD-3HMlP3tlxUKyk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1459858567&Signature=evMxQ~bjOSBXuSb34EsGnyaZEUZSeVeOUtiqJcNjZEw9jW9qSPhi7AWBSw49rVf4YJ1p4UZ3ne3hFfCSR~ueW8~rH2XZn8rnYSY34-OY3kkLf6ffFn6gt~ep7-GRUMt8dCoiQGtnyy4Pq03ETdWvKSd82U8axdbThBZODTRJxSs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1471872696&Signature=a9zcITKuyMDGNWIpCA2pxEOVZGjU10lVxNdZJ79rFk94m8njzm0MYz3RrrNfqBh8C9VvLR9vLAsjuoxTlWqegWHdnk8kkCriUKH6el5AsAszn0OakFFfs61U4z9pUiglltu9ynyfDN6HH0Vk6Oz8e4gChmquMGbkRI1YaTPvnHQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_pl&type=PROGRAM&Expires=1482905524&Signature=FYWaaQ7n4PxhP30uArJimzgjDgyMjnDrEi9aXV5ZaH-uL8JCGXkBd9ztARefsac1Lz-~OM5YB0iP8~prkaln3wgvv~ofng34Ft~2mKTgXmTmD5V3hMV10as2mw5mmvm1XMc6z6K0pD3xry5tCGIbJa6Cb4YZCckOtP5V2eXCOvk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1476223357&Signature=L5qEC1DUXb~p9~k4bg33EH19CG6XZb1xLIBJsO8wXd5GtEt6CwqfqFnI9dBr~fkhAsQCftxVEjgQ-K34FNamkG21yPGtgL5x9E-o~MwX3sn3WDn0ChYisDdylu4gZegekUJ43IP3W30ZhB42WY0eFY~o5wslEwpZ3d1PaToe00Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_fr&type=PROGRAM&Expires=1480912642&Signature=WwsNrRPWb7eixHSI2H5XZU21woN~aWscqJqnC9wXLsS3dRMi0xj-r8AF4dfCbkPbvE-bnrEfx~JfFWaSGhB0F79u~qJ4oC3G6z97NTthRswSNvwvfBsoaJr-A5Kut7QFgewxmaPT2mZ0ZapR4U32d6Q~7F4kp2XFqLLj6KqDEZQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_fr&type=PROGRAM&Expires=1475225324&Signature=FG9vGA3EHi9qnCFX0TFBqUdglwgegiJam3AZT-Z3YEnA-EZ1481lo5r0DltRmZH2q5Ea8iS77l6CcjHWFLxpyaenR2a-aBu2z5gkoU1bSlNnI0vk4SUpVOEGKjlt2YwztPicTYstXiOm4SdVzvOJqbvObJglr-STxArCfM0-CLg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_es&type=PROGRAM&Expires=1433468872&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Tv6kG0hB-OxYAWyh58Fp1G5q8ELJ2l2D7piNGKcfuqXur1Td3BAaPxoBwd2xfN9Mt8uInjTGNgS92~3ORmlNAkxVe9vgS5Yir0~4C45J1c-RCk33dE-8A9wClEi9liJ5K2JrlENtQ0IehT45xaqbmEfl6g1k~r31dWyAZmrevsU_&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1448801836&Signature=Lj7okwH7VdqAIIDU5f~bN-ZbWc~Q1LnfQZqfWp~TuvSE5lilx6t7HwjH6r6kDpdys08UN5itYTv8B9MoGqIkj3zMS~jgu-UNXgvjCFrAkq8HBwDabgP~fUUQbR7JOw~Jb6FDR9Jkd9Lqwtj0hDrjT3C7gMQo4GsZP9Y9~w7yGnw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1459989941&Signature=WYG6112jVc4kU-D~iyFbSdm2P8lCKvA7U09WEGq0rjcmvrlLPmsEhVDetuHkYZ5g4sLHCloeIXu4uKERSHagmPJD5bQwi2dJ8Fc7a0OFYWjLLOcrcje6vyCp5HOav5IuVnFT-dF5uWms6RULBHsK6gYak0BuHeGC92tmDgfJoj0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_fr&type=PROGRAM&Expires=1480997380&Signature=J9kNmj1XtBdci5ZLPZrjnPw0OIbOK0F0ifcxSgMncoOu6DRXo4f00bZBX7frzzLJtdN9pOpV2-CyOrWl4LbVN~n56AO6bUmVKK7YfvVLq0iQJjc191OHHyQ70erfhj42xJBYLxH1f3zSL1CfrCqg9DjIcbdHcw7136kBUfRq9Bw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1434622403&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=cLkYEWCgxxQAVIJgM~DNtgwPzGULVkxUlGZD0YR5~8FawD4p8LH-8is9NJazBrYiGVwpLBRMR7F21ey6YXe3pitU7lAFvE0AyCc8vsElBDs~KaeFN45Ysi2bDs1WGnVFDk1ZddV4GE2CMXqOXR7aO4JZRpElErPNaeREV35uOmE_&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_es&type=PROGRAM&Expires=1477180378&Signature=QgIKWd4rbIy4owHm~cRyLSGbBESJAH5CUR2O3oEt9rQzPZFixGHqzV5ikFUAsECxQ41J19HPlNO~IXfFgpcUZT-~pfRghlit2NvP5Yt1eSA~MaVWLr4UBSrpT15kfAzsHdZjptM8XCQCK8L1n68S~lEXgqdpE-zpDRfJUyOPaYk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1477716617&Signature=i0gDVfi0YQhe9ZVP-cSsiZRcr-Fq3YoJehxiNPxnt-ascgHPZJG0j1yTlk7csRQQduleIvyQKpVNwUj3tBrgnmBTUcXimP0OKOglZ4gRffXsLxpOxz-wzdsRCUkz9aMi-rHo7mZn6xCYWScyW81GizYKh0izGAVLVBGLt-39pCo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_de&type=PROGRAM&Expires=1476845350&Signature=iHMDC~9R76AdQC21PYuzZabndbEnvhCf2ejMUkKnkeDq1pwh3CQOfahavuO4JLpQ282TV0TNvnTB4Gf0cNKN~ou2xRixOQsFXnbxBmJxAeSan7VWDQBU6361sDGk03ZWG32YqhGexRzUCiRGvG4C885bHYZun1CuMR1sWHWXDsk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1477448985&Signature=iZeTShkfB44afmjRwE4pqcnUSVtkfRlo29w3IEfTihEdzxV7KuB4ZF~OuBaq4FdKGbJvay5U6JN3WD0CCvwf2c6uzv9t4ZvDHnw8zAMEgzTBAXJU3FrPdorBmQ5~pgN9SHxLPY6WMItBaedn5v0UxVCVCFp9I-sNSlcJABJzCQo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_fr&type=PROGRAM&Expires=1433384082&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=LevmjsTX6DDH4z25KMGfOrv4oyqF4r6EyqAw2dqLMUcNgFPqxB~GcmN6sBUq0Q68H6MJ1UxnyAtjtSaMJBJI4iMRvf9hn1suJAC1ObT2qsHHMbpDKJxRzrC~9c~4vm2Yp-XXgEYBOKmRtKU2QtPw5x4hlZEl46-MN-iW3okP-Pg_&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1477034877&Signature=Wl0Up7XL1U7m77ggYyiH1E9ty3IXo4JCEzfIt0NDXYRrIayq3QEn9cQxj8J14MrRP8TV~RFqMzQoyPxRb9wh2JaPaK6ANQru-2oGV7A7xQDJnMQxxZEwOq0ZM11liGQ0LDK9kF11ZprZ5PtrkrXvsgbeR7Su8A7H1LYkAlgCTN4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://gsf-cf.softonic.com/e7c/264/.../file?SD_used=0&channel=WEB&fdh=no&id_file=12219&instance=softonic_en&type=PROGRAM&Expires=1446329015&Signature=OyDM~Q3za3iZKl5xl7h-vkF6hn3NRglzvVlw9-kFH4Ifr6HRJY5pGmhtmLZu6fQrrKMwdlxXNYfuiQNhYxZ4oEadG3DUNLAHdefTO~q19vZal-VlADFdxi1UiQFqv8-sghM3RtvaFDAr31Vom1Ho1N~njRl9HITKLLWH2s5RDt0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=cossacksdemo.exe

http://www.flashfilescurrent.com/tTGUzDTidezhn EozSZx98y3TPx8m89X71FL8W7qgeu9b 4BB1916YaC7_IkcYHKrKc2tc5qchvyLjgsxrAjr 2xbWtdagl4Q0EfsNHrqDLZhzbr9S BAPriH_kvUy5npHhwXYv2CimPxMrNXE6aHPOJ xz6 Gs4XTilaoJku5UiLPez2zJiHMXjbv9 X7VgU1Kk3Dg1sP16p8hLUi6oYq nrYtgKGFE0oJUy1YHUo5Csyz4ss_Vbt5UtUfF1E0MLTEEGPwpcq6mam4XTc0kYzDKLUb0PeG8H9n8pp9GuksjMmD1SUHgoBF49l26Lqxlg_jc4MI8IFXwELsQCkTVtBpGryI6K4Vd5hyModIf5azXdXzR_gb1ujGNdamaDFza2reyxU9poawY9oEwDjnbcMhCb92NyIL3tG481Akf9sVTiqNHDmEzqmK_nnDTJurSQsE NcnmuyDkz84fnvM1uxcDCVB6BoVNblP1cePdkABVcWb5zLxk230WWx8eLhgODzVet06Fo Zqm2DEqjaodi_VRn9RAQ==-G10AAGRgnq2tAUiQb8AGHLhEFGgAutGdbV_K7fN5TQJ8od35fJmPRjOJ4OnyeAzT4QE bB7LcAY_w_0BLd9FfjzFfznpJOOeWMcwvI563pNlDlRgEVGCZliEISkU-e

Latest 30 of 106 download URLs

Scan cossacksdemo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.