install_mario_forever.exe

Mario Forever 6.0 Beta Install Program

Softendo Freeware Games

This is a self-extracting archive and installer. The file has been seen being downloaded from www.downloadpresentcity.com and multiple other hosts.
Publisher:
Softendo Freeware Games  (signed and verified)

Product:
Mario Forever 6.0 Beta Install Program

Version:
2, 0, 0, 32

MD5:
36bbb00ec7fa52c9b1441546cf4bd7dc

SHA-1:
413092eb6ba166633236c77f3ee880432ab42d33

SHA-256:
9eea421cb19bce90fde0f48794e0fd1dd19c74260bcd0e0957590ab1d412ced3

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/5/2024 3:45:11 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Toolbar.Conduit
8.8927

File size:
23.6 MB (24,753,920 bytes)

Product version:
2, 0, 0, 32

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\allmyapps\install\install_mario_forever.exe

Digital Signature
Authority:
Unizeto Technologies S.A.

Valid from:
8/24/2012 12:22:24 PM

Valid to:
8/24/2013 12:22:24 PM

Subject:
E=softendo@gmail.com, CN=Michał GDANIEC, O=Softendo Freeware Games, C=PL

Issuer:
CN=Certum Code Signing CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
28F77DDA713DA2EE949CBB5863CF152F

File PE Metadata
Compilation timestamp:
10/23/2008 2:16:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:x1H/7bRl7jm/YN519cPVkvNmr7UzNQ3Xt29kcQwSKpUVHYLoBPVIYgwCXg5p:xt7bRl7jm/YN57G6vNmnUzoXtYkcQwSf

Entry address:
0x1B902

Entry point:
55, 8B, EC, 6A, FF, 68, F8, 37, 42, 00, 68, 48, F0, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, B4, 30, 42, 00, 33, D2, 8A, D4, 89, 15, FC, BA, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, F8, BA, 42, 00, C1, E1, 08, 03, CA, 89, 0D, F4, BA, 42, 00, C1, E8, 10, A3, F0, BA, 42, 00, 33, F6, 56, E8, C5, 03, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 1E, 35, 00, 00, FF, 15, 24, 31, 42, 00, A3, 2C, C1, 42, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
136 KB (139,264 bytes)

The file install_mario_forever.exe has been seen being distributed by the following 15 URLs.

http://www.downloadpresentcity.com/Gj8dJ8UZVLoUyCFCA4YcgsE9v0He0dfrOrXU6enKcMSriUjvsH9hHvH_euqKiXzwxYfKJYs9jQthqLypwpCiA2gNAJ8kK Lzlnh9 7hSlzkpVwsuSD5FK_oxYUelbZ7tgXCSecWE oajEpKSjSsWKy4lF kfizLdgR6G5jAK192UkFpwIzw=-GwUDAGRK7 nLIofw4T43gJoMYHDIAfu3M8QcSmIcTOSWcMHtrjHx4yJQ12Qfsi4_4r3b9Abe3lovHSo7 z690REUXc2Lsj44Tdh8o5wQV azSHlbdA9u1WB1ZIlCTiGmQIOWkyeoD8 ShHQTYTWOMQXdVzHHL_7kTs9UCeBhHsaky1LvDsOCWcLH UTS5O9Rp_sLXjW4NpZ30hpP814MmzYRtdwWRxkF8h2So1SRLIHD_lTB1V4T C sOhRGlNDYorbMWWKa4zzrgj0N 4HUuWt84JcgZEWXAzYoe7sICE3PUYY44tz0u2lNittAp U3zxdtyGIbMdY7v2No3TYhfpXPt 3B2gpH08sMJGu5qCXw11lL8upaBstfy_ONfvb8uQdhhMWt9PcdvXInn_dbyvjJl17gxCDuO9m8fn0iXxtCdpaX V72WId9DDOF5C6H8aMfyO4aVdMv5dcbt_unbdsY0sF67rFi5fZJbdUUnQGyqdEs ox1URLdIzX8M7FFWrnxGNwbo4NgU9dY2qJ1I7BfuuSUr3ujWin94c9nJga7hZCHZa_ soPW QNs6og9qFunHlJnrsdsJYRyBc1a23l2fWElGxtFiIVo1JWftMzbmW4kuJHXOD4Xe4IiJRd24GjmOd5XsZhqn3TkTAXlWBemJVyoKm1EYGPgJUr3lLLjztcCFD09qJQD_MU J fHPwBQDM3fOgJS5mh9UMJgcDqzcCXm0qisqEHWQknqdDqCawGeBRwWQMtSQyDreorpjbnypzqyj5HJ_f9

http://www.softendo.com/.../Install_Mario_Forever.exe

http://i_mp3-es_mario-forever-6-0b.foutrirewio.com/crawled_soft/3/9/.../39604-673573-mario-forever.exe

http://i_superfiles-com_mario-forever-6-0b.fareditrewiry.com/crawled_soft/3/9/.../39604-673573-mario-forever.exe

http://www.ranchmetabits.com/yyGElTro_4UmsOtnXBUbJ3xi7MB_6yDTdv3kPkvpYkR6BJXx6BWL2jeOB9KqkQHRw_adTcsbf0L9mQATVdQEpzum1VxpWkRQejeXeR5EKUCJR9tjrAZCjxbyq64wCX1rGFE6uvWFfoapxFS4GbY8rgmv1sRuHMXktNKB4iXWywF1B16Kj 4=-GxkDAGSyzXo OIG0yJ0HsyL YSi6EMwWJnLA3hZDzCex98aBJ2uM_CwCc33vQ4HKI9vRhvdYs969SYbHf9jB7BNo9et7GluU3MAhB45yrzzvRCWNDclua4bKbj nYLneqh6oERU7enUQjmMsHqlUQ08qDpCdjT8Wn7IjlY36kukptp_yAZsdJ31uLrWHj_0oJB9VeIYM67S9rVrOUFZKtXyYDaN1Rn7LtBxPTHQpGYYn5mt3w eYcMytl3Y5cIlqHaVPTJ4CftAkTjGaQ5r9iAWLgJInBTcxbIBOI4lmZH0ZzrPtCLorzuCBrUo4Vh_TXuJrHYe0vzuy0xclqrShGHrggTRFsC1Sa7OOd32yoQ60wnuPRp4Ix slt7JOAGxPr4t3qe3FPmtKjsxzSRCM2HYuOC 9ilVFN0AlRljEe04rjTqsNuW9G5xNCos 708NGlEtwTzD_ENMsONHhUhojJNBLU2BNbvVMiYx5k7JDzUZFWvIsl4 hAGsPmN6yE6zyBrfTTEfg9OI9z 2_QYMr6rTkv4wRcfgk8oiVPKCAsuRx3NVAGBTG5d_VJIqarXCprqIOscS8g_FrX4QCqNBPMilRoaU6yh59SBVcVeaRI8W aBNQMbvsemciBrXmNUUIs8sbnCCV38ugAARxAtmou2m7a6uvKPXENS0ZNf1p1RE6lHsBmiy5JAHnHOBbt5zO9xJerppGayTlKz9 lXCGQgNL_8RfZoTesQ0jkwfQezkBNlrKg3UGvtS2Rre9JWw20dbHNtY9WUR uKsPIcf3v

http://a.digallstateinfinity.info/hp/?q=iZ4TNMYRtd4zGfABCDNA6JzasHq1xx3xCW0RATM2KabjX7RRraUYWu3qBSqMDPOc1iv 9uh/G b RTEBrD4isjm9I8QT2VpmRj7ibJjHgD1EKcdhHZtsjBLo6cicjFHWlm6Siy6i93iMSVVS/54b3nJwMeqBp0hs0h3eV7QU9kVHDclfQWt1QYPayMSr1ktKw6aPISRkiuEwsfo72 kdPDhMciOFP4z0/MvhIkXjB6OixWI62Qb4EsmYBuBN6YZxFr8hvXZ0I9ORPrmBQTENz67yBy2A0I lUhSaD8 wprNyE7Oo9elBpW2athOSN TSHUri2 kALZhDS6t0Jec7hRmB1zOJ6FKiRKsdjneDo43bRyaTfeLv8D64bqOCK0Efr2pbZ5mUQuchqEXwKviU0xS9Z1EWKr50O1JTUftbIAkeH4wnZnG1UEpwN5gYLAn8xfw9Xb45M8vPE7GJVdrCr vgcq865B Nwe44xTYNCyJropm PcxZEiv6FM/yFJafpcsy1caIjRXucH19LkQrXC3RjW9TFNjw9md/OW7kmFUNH9DAnfD3Lmxfp6PSlTPdpawNOqDtY7MTsbaOQZODvjzug4QUNG6mb7et7dKFeC1Gby7x81R9LkmhvK8y3lVUVwDIBNt79/f/CIsZy W/.../o9FUwN8MX1IkjlxNriyziW1 4Hlq5KuqtftwDlH87toxXgWh8EHMuaHO5G4zXByxpeg32S43G9sxV2rIrkRoBgymLeiI6KwQmA&external_id=1432737755988986037&uuid=hGRQT8n1nnsnmg1nmmrI7eMq69lUsrHNmeuLDCeyOw4fBZaN0mUYg4MdcnTfNhPOThww0NKhhjG8KU3EclsZG1aTaSb8zZ94g7Hgr4ReCbCBgKB3Yfsi54AoKhwyvExHnv

Scan install_mario_forever.exe - Powered by Reason Core Security