skiregionsimulator2012demode.exe

Skiregion Simulator 2012 Demo

GIANTS Software GmbH

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
GIANTS Software   (signed by GIANTS Software GmbH)

Product:
Skiregion Simulator 2012 Demo

Version:
0.0.1.0

MD5:
197001dde85f01a239ca38015ed7708f

SHA-1:
2a437ebc3fd5965ed775d74f4cdcaf6504053ec6

SHA-256:
48fd44c4628fa80ad23dceee45b60493c995c964579a6cca9ca00229fce0d0b3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 9:56:03 PM UTC  (today)

File size:
150.9 MB (158,257,304 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\skiregionsimulator2012demode.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
11/18/2009 7:01:45 PM

Valid to:
11/18/2012 7:01:39 PM

Subject:
CN=GIANTS Software GmbH, O=GIANTS Software GmbH, C=CH

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012508964DE6

File PE Metadata
Compilation timestamp:
3/17/2011 11:22:54 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3145728:ag5Y05LG1j2yytRZIsrFSZBG8w620LFHOt78gQaB0NI6JnC:ag5tG1VytRZlrFK3LF67uaB0C

Entry address:
0x16478

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B0, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 4E, EC, FF, FF, E8, F5, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, AC, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, AC, D6, 41, 00, B2, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

The file skiregionsimulator2012demode.exe has been seen being distributed by the following 24 URLs.

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_pl&type=PROGRAM&Expires=1459890542&Signature=Y2ZK0NuqVrr1CZ1VJzHPudVVNzxJvvEFu7eOI3BMt~0k1KPve6551E1Ce9ibJ4zs2U1UoshUvG4SXQGYcIroRtjqmSuC3L3Y02YT2DoMp3jHgwhDx3r-vQQFLsf10q6tRjekL4LidfxV8eSS-Y~R9KhnQLZqQ22ccLC5s8VLov4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_fr&type=PROGRAM&Expires=1482277950&Signature=Z~-Db8ZHUC9AKYjCQ5ya4dv4NIPLSGIANsZ-GDAssvb-MUPoP6k8NL6v3RZP4P0MjBBv69yepRc5TQ7qpXCCmXFxGDnjJKJQHyUuaA2INt~ahVhSSLR68z6E34WGEKIfCF8DvwrynJKBIev~KdSyTvgy4mGmupdYIdICdsjTDbs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_fr&type=PROGRAM&Expires=1482038243&Signature=a8CFnogv2mlodzKaOCcU2hxyEdHRgZRwBG289B72JtEyDH2XpzOFofL~hgIG9P0E4Ot7td0BpRWMlGiZTQiTO3FiP6B-8mcV7FKIgoS8u~Y1czKPoAkCOxYGg~7xEu42a4A3AJSPZYv1l7d31aNbW~gKqc~fVwhiU21OF9RWbOA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_fr&type=PROGRAM&Expires=1481663260&Signature=SmphZKDeqX~hiT3lFBTQWO9jjCey41hYumRi8CnrYRLBld5xC1nfb6TBdmnTN~mKewSwy1I2nCI7GJde-9Nm1h4FJxrC5t4MAw7vodq~MhIT8WJl3b2Pp1ATaxbGlm5ZiQYpt4wCnNIgqSj1H3zPbUMCriFfa~pJ9i7rYQREscw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_br&type=PROGRAM&Expires=1474102069&Signature=VLel2GDIbdBU3JO7RE65Jl1ok9fpT5ZP2FOmOMegOxGC02pq8s36FbWg65MzrlehgSJx0Ur-wA670pDT87qFvwBZx2D4BcNQyrSTmFbp2XiOm~fc~HIx1XYL0f2ymc0MY8Btw4Lw7wsASNc0A0gch3BeSUU7ahmk1Eye-5MOIWU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_fr&type=PROGRAM&Expires=1477226689&Signature=fOt2Y8W4RWtG~SGeK~V9KnNcSevVHI4m4O6OESqxWZqbjdRyf9zXMGKAUva0sG2I94CCe8ctIhaaliXSQCZSql7PBMotxhBJm2UCtfo6zbtnvvBDj6gR48cc7TLJcMfMOwOTfi2VQ-gZM4t6EwtBh8cp-0Y864w09DBnUsfErz0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_fr&type=PROGRAM&Expires=1476483092&Signature=ZO~XKLkaZfWqLVTccQphwED8nuPG5xlehp0yewZHyVkIrmmF2jCccMRTmOlaIEargV6olmFDcYjzOSRRM4kmu3AnsIWoG6uqW4Ei3xn0JSNRchp17k6LYZVkNrBtaI6NGetK5mniX6xqrk~Y539A~HzLHBJzTH00o4c2IPellWA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_pl&type=PROGRAM&Expires=1476157457&Signature=UordsziCBVH~AOQ6nLY5WpCIfVpsO6Dk5TAFMQT0Qid3WZAm55Q8lDEUbkfd4niirj7ngota7KaDQcOEei-TzNGTenZkrorfw5SmA11IOuMJ6ZOoGLHxN7QWgLZSBL4sC1osFViG6bk~oGc4ZQbKFoi0p~az7vqruoQxOF74Tqg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_fr&type=PROGRAM&Expires=1480988760&Signature=alO~IsAAl6tKPX8qjgBD75fa-DbVUVU7onkhOF9QVrYgHKrc~NNZ2yxSWO1BVt8Fn7etDICRLddCzQEGUUDLT5REnhRX5V4btNzzAqrHxV8Qgr~75DEdPuv2zCnyM-Fh13eBB~RQ5he96-9IZ5roSvpHOJyeiYVBiayzR4QvN0I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_pl&type=PROGRAM&Expires=1453183038&Signature=KWhbqQ41HRKy8pDhnCLSNLzvfr46QgEYZ~WUe1~Fqvag9tk3Yk1lnGkHK9tf7BWZ2QKEDhzG89uN4Z4iWBXa1g1jwea0ITL~oSG7pSZt8LT7gox7dttvKQaIIaBuoLOVZfg-LKZQsz3DvPAWIrdKLsZnRMkUPYQgzx1d1Kg3JWs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

http://gsf-cf.softonic.com/2a4/37e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3332369&instance=softonic_fr&type=PROGRAM&Expires=1454820403&Signature=TdukHBYTAqstthw5SEmKeg-NEawr1ugux3ffz5aerL-OeGo0JxvLTzO8uOpQO6ievANAOEgp6TJ4lFWkYhnLgVewwsoZVt3UvXak2q4giM7Bm9tAfqz5t0P4sumL0bv45bCyYLIxqEn~Ccps4lkdzIPphmo8iMYkFX5Yqe7EH7w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SkiRegionSimulator2012DemoDE.exe

Scan skiregionsimulator2012demode.exe - Powered by Reason Core Security