home

dsj4v101.exe

Deluxe Ski Jump 4

Mediamond Tmi

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from s6102.chomikuj.pl and multiple other hosts.
Publisher:
Mediamond Tmi

Product:
Deluxe Ski Jump 4

Description:
Deluxe Ski Jump 4 Setup

Version:
1.0.1.0

MD5:
810ef801d9566b13d702816b89cebc44

SHA-1:
8b7dd1b3c849da5bf8314770134c98b9db849441

SHA-256:
9214bef4e6b6cd077594710093af9e4e16b7012a8eb4d6f4cfdfe0c9ef06241a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 5:00:50 PM UTC  (today)

File size:
10.5 MB (10,977,042 bytes)

Product version:
1.0.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\dsj4\skoki4\dsj4v101.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:sl2GgAkvhPronzj3Dmm3nOiqI9DQQPmq+SOD+jcAdDQ8+8POKQgJ:nNrK3TmeqiQtl+jcAPNQw

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file dsj4v101.exe has been seen being distributed by the following 8 URLs.

http://s6102.chomikuj.pl/File.aspx?e=pzn_bqU468mDv8bJWQM-nj3pn5WS0kOGu1Vk9oq4sH56cjJVfjQ8V0ZMZskRTfrYcjg6SxuDzdcaW4WZBtbfEGFQ2uMvRLGLz-xNnQUzXObZXz12kA2mrSCfQPOdMRjGWT6fJ20PGn-X2VaM3wEOpw&pv=2

http://s6102.chomikuj.pl/File.aspx?e=pzn_bqU468mDv8bJWQM-npYuWED9NQkwGXbtXdFWaSMJ78DUA6yu2GBouVysb4CwN7sk64tR9vIpicb1ZQsjpeZqFL3xzdEiGY_m9VHRfpCkvIMdJqxJdr6Th8QPva1I&pv=2

http://s10455.chomikuj.pl/File.aspx?e=pzn_bqU468mDv8bJWQM-nj3pn5WS0kOGu1Vk9oq4sH7HswD5Nk25e6OU-Mnn5bHwS7qytmQ8lwU7Qb5cr_7lKSO6bBYfB1dSkcS-308VaieIhSQuvQhOUbl8wVs4pCn01-GzZZkUS4Br9KaWMryd6w&pv=2

http://s6102.chomikuj.pl/File.aspx?e=pzn_bqU468mDv8bJWQM-nqD3AbHFygdckfvyCpM6SIF6hRdruaXGE2h1L3cVI183_xItM_kBJ5gQKbZxI4QsQamdrGhki6xc48sLuPW4HqIyarB4acPPUKikJBm-GJ1foJtAJlGEDdZd7PpugsFRgA&pv=2

http://s10455.chomikuj.pl/File.aspx?e=pzn_bqU468mDv8bJWQM-nl0R4U-mebrNmzzrl0xKTs8rFLwpnSHm-tYKx-43xvUViTOdCI_EXFT1vso1GByYXpjK9AB4Igqh_vTOufCBUfDgvLn-3xIRnbZ3PI-0PNcBSDhrPiVZAZaoKbYNMK-4Mw&pv=2

about:internet

https://ud.interia.pl/.../getattach,mid,48649,mpid,3,uid,256f717843809bc6?f=dsj4v101.exe

http://s10455.chomikuj.pl/File.aspx?e=pzn_bqU468mDv8bJWQM-nj3pn5WS0kOGu1Vk9oq4sH74JzT8BD9T-VmraE-LRUkV00JbZMH-KE_9Umdaahx0njdiYK0NVCCtwrG0cbVh_LImEq3gQ1Hun1Idhoibvd_bbaY4pRzXN_-Yj-n-XzpLug&pv=2

Scan dsj4v101.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.