» rct3_usa_demo_final.exe
Overview
Analysis
File Details
Downloads (24)

rct3_usa_demo_final.exe

InstallShield

InstallShield Software Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from www.towerstodayvaults.com and multiple other hosts.

File name:

Publisher:

InstallShield Software Corporation

Product:

InstallShield (R)

Description:

InstallShield (R) Setup Launcher

Version:

7, 01, 100, 1248

MD5:

01b43a1a2545dca857cb13f027db501d

SHA-1:

d10a13fca3876002b15fdf0cd8adcab0c3a51b3b

SHA-256:

8146b45cf8f821afdcbc52cbdcb17d2ae9d6bd4f51788588c9fae654f74f8588

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/25/2024 5:26:00 PM UTC (today)

File size:

163.2 MB (171,100,464 bytes)

Product version:

7, 01

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Installer:

InstallShield Setup

Language:

English (United States)

Common path:

C:\users\{user}\downloads\rct3_usa_demo_final.exe

File PE Metadata

Compilation timestamp:

12/2/2002 1:31:43 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3145728:kVx0HZDuU3vSgz1qDwgDINGEU9aUf9HC/Ub4Yhc/YWUEWvEVAkPIptF:pHcavSgz1rNGZ9ak9icb4ZvUD9BT

Entry address:

0xB1CC

Entry point:

55, 8B, EC, 83, EC, 44, 56, FF, 15, 44, 01, 41, 00, 8B, F0, 85, F6, 75, 08, 6A, FF, FF, 15, 40, 01, 41, 00, 8A, 06, 57, 8B, 3D, 08, 02, 41, 00, 3C, 22, 75, 1B, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 04, 84, C0, 75, F1, 80, 3E, 22, 75, 15, 56, FF, D7, 8B, F0, EB, 0E, 3C, 20, 7E, 0A, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, 8A, 06, 84, C0, 74, 04, 3C, 20, 7E, E1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 3C, 01, 41, 00, F6, 45, E8, 01, 5F, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF... 
[+]

Packer / compiler:

InstallShield Custom

Code size:

57.5 KB (58,880 bytes)

The file rct3_usa_demo_final.exe has been seen being distributed by the following 24 URLs.

http://www.towerstodayvaults.com/c?x=vqSxqed3uC8P5j1pO2xZTFtfOULxDP6KkFcbBchFAD0=&c=1z3RZb3Qg0O4vD8W6yvN7IlYSJxK1Ip7omLNqMtXJwaaHH9lOvbFMwZu0iihlYxhbzxr4oE9dXnFjIrUWrc7FVzJiEBa Hxkx/CWcoo9o2OgKwlwm4uI06j8wCnX/N8StwZQ1e97G0DWGgI2mVZHX34AddcujxMuQfEp08gg UP JeGpIiRH0Eqa383eZIhT&e=0&downloadAs=rollercoaster-tycoon-3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463233983/fr/3/.../37497-663754-rollercoaster-tycoon.exe

http://baixar.freedownloadmanager.org/Windows-PC/.../GRATUITO-1.0.html?ac29f7

http://www.vaultsfarmhosting.com/c?x=L1jHshV1Y1 ySCuaMnFh/Rh4w0IDp5LNWOR6/4Iyly8=&e=0&c=bI4Vs0M2EjwZvZU/F8aIovPK2wqk0xlXiWJj1OFz/B HLkNWCqkaQUzLyi8DT tPU9VKAUzL6/F9ofacrQ6T9e4xZzoAQUyYpb1/Hbck9pGhoQnE5kkYn9UfRkqMOm462OgUe10ZvmKkXNR/Cub9BB3Qrwu00ZLJB7IUw PWq5k=&downloadAs=rollercoaster-tycoon-3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1468328362/fr/3/.../37497-663754-rollercoaster-tycoon.exe

http://www.applicationconecptclean.com/BJ_YHPi7j0iam MzZdINcUVxF3NQRoo0LtlkYGnb9jPJ9ZiM_6Yr6T7mxx0X5QR L3oH3TG8AfpkWlv9AO8IabITPfBdzzAlsc81BOrjX9Rwf93BpEjryaT_8uWpD9lM_Axki0w8X31C6OMh_8p506IECZ xfMj6pQQ5K9NtexMfArJUyc1ORiGwqByJKALu06z71VwZ7xU1v_Dz_jygghNKORzOwQs9hX9ghlSHCDngmbhqtM0=-G1UAAMTa3Di9j_h6to0WJxGk8TYUOORQA5GAwoAoa4eNMc 3oJ_XeD097BxXu28FtJ1LSpZGq_ZQc9TumhQgbIOUkpBNKgo9C6bL x9zjsCP

http://www.downloadpresentcity.com/NxcOCI6XFysItuLVvEsx3ARhRDOOblw62rX6OTxMw m3BB 5C6TC0txYAnn5SSWI8dVKnO3NTgcNA49nbTG2AjMC3DjRHHVcLo0ywlX5mKkpzI9r9cKeCG3DvR1c8sXbkN2IE HK5vKQnSYY45BiitZnZWNTt6ciZ9ssXljYxHrvK_zA W0fXLDZL5ZWQ9Az64behdrudA6 JrZEDaDZIS5oEWRw==-GxkDAGRIL6os7hGwBDfinAJvCJjIAXtbDDGfxN4bB56sMfKzCMwtO8aiL8_06He8xyoQQ43EUGaRrPMYCKIkwS3w 3OlU6Hj4M02BwUvYpJfDv3cm5H59IG1YzxfOX6KqMfb5fA5PPvMv91jq5sSDwhmHdKyIPnK3qbs9j_sdJEwDB7bSKE5Qf_B5yoaP0_DX268vSrNp_MX5bqOJeMfQMakijKgKai7QxZsHGYeCH9FbhAC42P9gEzQeURR vuNSbt1l5IwFpxihBjkgvUNlnUD_MkYHWQRrPScVRpkCOdWPBdXOahQo8HfEzEpUuo_ymb_tIfdx6LQ3CI_IAbhjb6p7C4M4A6LTPXTH OfP UjW3rpQbj24zTfOM6HSb92j3IuMpFajsp04oU_iGgcXO OgAmYbKHQjmAwWvwXB1tOJE2xmhESoS0JFH8bXo7G8FLiS97tF6FCyP03m2paQ4VTAIdaPnszw_GY4p3Dx6ZHGuxKa930z7os nUQ _i2bBY5HBbErmkBDziHbS4n QdNNOioPy3 _8M2Niz0EkGUhvsSNcQITTpEL67DEbq hcT8W7MVl5A20AoxCDOuQvYgLZe3l5yYFtZsgz7Ib8HbXrISBhib4p9POdDdymRAPz4z2 XMV2xdJz61qa4RlzAocebs70IRZs54qTvvoBk_xeui6o1zxO1E8m09UCQw0vB4fafWpTMPdK VeCfYaRnCvqHi9s7PNi

http://www.downloadpresentcity.com/0qIlormKcsE1NinmdEdYFyRJTtRMNUWtK0KGWkLEBL2aLtNzQ0M0Ea8TOPdSfR9sA678jnm9VHeVOUkZmgswEg2fWFY80WhfLsnTDQQSk1oc7ViVpVpwN_ji9T4Fo7Pt5C2_HhLksIUVqr7Y0P_UCp2z_Qed5cvryZam9SN4_ bVztU2bOZbQagUghwToxMD_q8NoZAYnhOfvx28Pn7pjIJRgQeMpQ==-GwUDAGR6N7_KghVE1 6A_3BrmKASPDCRA_a2GGI ib03DjxZY RnEZhbdkzFUJ6vY9jx3om90nvRXkNsCvCXmVbCx WTtGg2E4DN33dmP2 0nEgSAXFvc91FWy06Ir6q6FVXxdbVpmisycNc8xUjWv2bE7MUuNfbqJLdLaQduc xz92r6d5Nhq0ibs3DQ6uTr4whRQpm6fhhryOytCOidHt0Zy2RXl4k4wO_8qUtAXRqLg7YxtXTtLRk4d4_TVYArIKbDGylLxqVzwz1 acnuE1_SCizVv LuvLPYpokt6uflrCsqYW4p26IVKvuhyFgiy_rfCax8A1AMA6AgM2zUV1bXq6Ko5NynkwFodfHqG9iGuxCRfcSdHRos3WMi6zel17u8fN7ECnSoL3iKjPl3h2sMqBj33AKHx_oGAUFELplwc9JU7Hsgu6ClBvCbcawiuMJ9Fx_jVkA1cH2Krf8cnGzz8kwnbZIbqZsvPSgICgxCCny2Uv2JAmz_Wzax16D8wuDu9fpqAjuPLRjLzjQhgdTUzsytYU_3XYgpYoTst27ErE4m1FiDEKnKii5 Fr8gjHbfoOHBsI9OZg2fKwjtOM2sUiWFWEBI_SjvbOckbOFXeJuv_3KKrDdoW4QRFBScwQAniwl_hut9Xhqln6EakJCYsdF8d3b1EWfROZ8BxQUiGLb8ltg4p7k1_Hf7yLis6zoXFH_eGFjnzXQzYmVVfY62W3Krl5D4A4Q

http://data2.mujsoubor.cz/downloadFile.php?n=cm9sbGVyY29hc3Rlci10eWNvb24tM18xLjAuZXhl&s=5b5epkcormatmmp9ed3oflvmo4&r=f6e0ef529a75624ac13443ed86500124

http://www.ranchmetabits.com/RNWisfRWcH1X6e1iKzGVyi03102K9CVAjiH7 UByO3P8Xt4xscFnXu5lqN DOb4HwF psUtIYYj6kZhefv9r4nKZeusw63yNGDtUYO6EbjQr Y3tsKm5VOcieRUrYZ9cwbrOeU4S1i dUg9 q6xkckxXWhOouPvyJYa cYJqEIl3FHqpkpaUXz JE7RZJK4fgPPx_hJymEhjo6jlyRIBpdWnW4FgIg==-G_kCAGTKTaosOEH0XjEN4k0GkywSHCZywN4WQ8wnsffGgSdrjPwsAvOb76AcqyPbxw3vkVZbJMvbQu_aKzp bzhb2dxKBdwbLxK_H748oruPLtt4FUEk9YIdhAXv0Q2pMd24iSsYPRWpeqtSozg Fuc2MoOigIInXUHZ7F5vpehzmKBj2e1yTKlfQAonsT7R7TYmwhZs6FjitQhj xhtBzEs7pMXz3eOI NTCtVebVNFuIAbGpO 1PvwjfbLl t3q2PnhK2EtDhsyz9XIyGjikPL9LYCj_X4xHN329ih1GR0iBJ6KVqaRKk6TV5IGgJzm2yRyzpQO5b FwPhkH8lbVnljjVxv74KgwmV0EyUrrBPKJ9W2cjijsEkdFDaUXVT0INr6Oc snElASI3yBpdn48p5xtuWmQOHVvKLMsO8YaMwgiGLRkrlSFPgWos w5Vny5k1DphduM4DUJONwIh q3IwL49Gk6DAQ5Ixoyjm6hUP4NNCZmuyyglRJmO8YALk95UQcUxff0ohs_Ynq08vtZUD_vAw3m72fowxpcTpVt783rFUzRxN68tvZ7geGnygJTI4ttoOkaUjzXQVvnxfmv350G SJuPbgdo2X9lRWCipHGc lcigzuo27AEMm40 UPVnx0znam_tea68AQnVt3VTZ1JwYW zUmcqEiDhqKks9xNZOeFmQAeYvGfnzIMs zLJcBYZHPd7jdyJsLECUJ7Q41lsKQocNfcggiWCJ

http://www.downloadpresentcity.com/euAhlRJmMoTOuI3QYLEtWLz4XI5NNYcV6MKknQ13UAhp TbQtLTXMVP1D5osPZiHLm9RCTh2NTev_owRxl1pLmEUkfiFWlIij9SXpUU_GR6L dAp Cz2bza3M20Wk7duotUiwCnYZ34kR8hisBF1HEY7heJ3e1IjZk2kMLSQR_XCNDigL7UupbbosxHnJZ1inEcA_s8N-G0UDAGTKTaosOFnwfyeoLtZkgmpQmMgBe1sMMZ_E3hsHnqwx8rMIzC3dx7wvjs_ef_HeLS LmAy8NkRc4BLEIumjhXhYH0REHynt59L2ZEFjlQPTH87yR0dg2UBwwyeIn0_fpZzOWvSoSeFcp8qtBWtj2a2ivwrljW1wjQfEMkacwAX c9r6tbucZleAMDlUX bcCO6l6V9YJXFsft5J1615VcqDX64R6JXdi5lVyzyd667nOnFmgLudGRXL93ex_oES5RBLCYdcYWwKDVJqA6_Z8 4E_hiPMoBk3OUbJxk8XX3vXEG_b014rwhJta7ozYrarqAcLRMhGv4PN_hKjYKfBqhq1DKiYiy8Qp0G8yFBWt81NQwZZftgaWGXHLDEKjCdrczvnTUv6rzuecA12wKeByHHiGkcyMTHkg NZeJMET6 lJLzaWfa2YYfsaB9irZOPo0bVzlvFfHTRS USUy0VuaGyjiQKPOSHsWsOZy0h4O9qHbYRrM0404yu0Xiu1DkKoChb79ez9Wc3ip3mcw 5I4A3RNEZGMOBghHxVXuyVB7wtpEX5N1DJ7G2A97FnM 93ZAQFK0wp2QF931v YE3zumVAEzR2PffGaNz2Zjwcj11b L0AtTWEwkyMRxRXLG8PDpTO2rkKS21WrbcQK87ha1DjOnuo3IX7Xik9VW6Spl5Fux0qVbDgHEM_AU9WXrkbOt3V4nqjijSir32xYX0PUJjkbXelyW_QkB_FCGOWVGoo_oC64v55 f

https://rollercoaster-tycoon-3.nl.softonic.com/download-tracker?th=1/.../OoQP9S5HE=

http://software-files-arl.cnet.com/s/software/10/33/60/.../RCT3_USA_DEMO_FINAL.exe

http://www.downloadpresentcity.com/BxxhpDdJ3poxA3PIGXhqOUv R8hY6Uss1KXZm_mw M72Jys3c2Iy2_I6WWGvPt3OjAnZZ9ZLh28Ft8Z5tfx6sNoMOhGAlDvvGZlcsIHlw2TMW7cW F0K8pSDRMtRgJLZbfThEjiU0c2zbkO6tD7AGgGA hQzpWknkzU1YuJ6DO2Lja6pvEMHNz 4t8BSM8Ce XL4qob7v1iHk8kWLoyEBtkwJL9f5w==-GxkDAGTIbTQOfBA5Ht2yYIBIxVEwkQP2thhiPom9Nw48WWPkZxGY6xsORVfuL9hteI_VgJ S6HD0hGG6ioWZDU74kugrSLB9r5apYF_oeRkhY48jbSDIr8ffGU0UL6nr3 Mg13Ehv2pLcmib g1zQuUnCHAZ6JYPeJ0O2sC47eOLqidp7rtWiX4mwPfchzLEkyb54gF5F0vKAEgB66WXXEOvqrjO6AHIDuYxIZ7nXJX13DB39Wr0FCXtoNNhhkUp7xfbEUOvvmXKBqziKZmuMDCz rTFq41P d02m41wVFQxX7zc3BMZfWXjAmfplXwGyEKu50QZxiLd6Mq7h1e4YEFd_gaNLCB5qXoIJl p5DoSPBFjKw3Dmk_ewUNKrdnaHzyhcZ AqbQCoYsEZp9064qAtx164sphwLLrCwzRLuR1Xt4yxjWAkXutzgzo1KPMeGS_ai2eUgkv5awpJ1oTsjTUrs355XmIpCLfE7h4dhIWYePevrvFIwQCJ4VfPNSzySZki_OivnKW4rFWciUXwVz1PWFn 7gP_bqGk6LC1MVy07SqvvjO8qsZ6UFVYiQODAe7iTOgD7RUtxo_Li KGj4xYpDyLui216Jhk3N0DDsvp__LEvdd8ReRYSLXfMQvmSZI 4bkXDGvTJSYmgNoHIqfTx1J_PvzuFiO6Klc8i7BfE F NlnxIiHtJxgh_AfZq3G10fEkXk2qPWvgkUAKP6RtleY_Lz9AI P

http://www.vaultsfarmhosting.com/xkZ5V7iGcT 69AJk6bJCvJ1zanQtfTc5PfYe_IFdPFbt9dTNf6rPF3YYoELmzcaqTfMS_GIZFezDYGNRUjtDd3mdx3dPsK60JMdm6XM473BjV8XF8z6xG8nUxPE N7aoqkhGwldEBsrVgJCivZ47xnl qy2AR0EJu3UwoPWhfYHFEudOIlhXcVaO3nTgu218_ 3erYl_nb4AIb1UTKDjAhrRDrdx4A==-G1UAAMTc2vM1h27u6Pe0mESQxuxRsAEHTgGNA9Ea0LAx5vkW9GON19PT7uNq962AtnNJPYuzQorlAuEeLAwUuoHMBFWponhk4R70_secI_nn

http://download.sosej.cz/Rollercoaster-Tycoon_3.exe

http://www.sharetourscity.com/c?x=KMxvYz03/Ec3AwTpQcN3qQzQD4ePZInK8/g0Vw44w7Q=&c=QNLiBd7Z/WaIAQ 5tCUQUaADOk9AdczSCcMS QkTl 2eD7lkKehQX2MmxK0ZtbYqBt2Wuh83OOFmE25HwfUkl04y0Xm0Fs4IkCJ9vCg87QMGSMxBSvpNk Qdj588zbGwfFLtoBueyR5gyI660okKfHOfXbdCksWdkeU59amQEfk=&e=0&downloadAs=rollercoaster-tycoon-3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1464851607/fr/3/.../37497-663754-rollercoaster-tycoon.exe

http://www.vins.co.il/.../roller-caster-3

http://www.bodybundleflash.com/c?x=7Fa26qbuzW9oobivFPdVPkVwq/7bggFfiD8LK bmaHQ=&c=AMYWZ/ p79OkltntHucBeXmAWvS/FDUaBxPmbvXLW06THHXBRMsiAUvCsdxoZ0fUZ9VqiRLu84i4jNdyN63VZQs UTQC2ommDrFXJwBj3ivxEJzolBJPPDBSLG8ug26EN7wURmm0S48u3XKHUNmaKA6PRHwlBlAxCrU1p/w7x40=&e=0&downloadAs=rollercoaster-tycoon-3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463387836/fr/3/.../37497-663754-rollercoaster-tycoon.exe

http://www.cleandeliverytour.com/c?x=zz5YL413gJvB/4e6M/Vjo/5MGIUzI 3AH7wvDFN9V5M=&c=me9Qr7/N00Rif8Zb9oEkh9URzempN0jc aI65K Kz41A4vnNBukCshMjxrpSOOfk mdIPl0moTFhYP4SRjl9w3bujUKHA6 UKqzKRvNJ4AIsg2Ja/kQF1YkQPQVp5PZPDHH 7SwksAOjJFtr3aowGBcXz1XS2 tqoxc49lIpSkgWgjElcEFljHEJ5M3ZdDI&e=0&downloadAs=rollercoaster-tycoon-3.exe&fallback_url=http://pf.benjaminstrahs.com/s/1459857815/fr/3/.../37497-663754-rollercoaster-tycoon.exe

http://rollercoaster-tycoon-3.nl.softonic.com/download-tracker?th=1/.../OoQP9S5HE=

http://files.downloadnow.com/s/software/10/33/60/.../RCT3_USA_DEMO_FINAL.exe

http://software-files-a.cnet.com/s/software/10/33/60/.../RCT3_USA_DEMO_FINAL.exe

ftp://ftp.infogrames.net/demos/.../RCT3_USA_DEMO_FINAL.exe

ftp://ftp.atari.com/demos/.../RCT3_USA_DEMO_FINAL.exe

http://download.fileplanet.com/ftp1/.../rct3_usa_demo_final.exe

Scan rct3_usa_demo_final.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.