home

skoki narciarskie.exe

Deluxe Ski Jump 4

Mediamond Tmi

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from i.download.idg.pl and multiple other hosts.
Publisher:
Mediamond Tmi

Product:
Deluxe Ski Jump 4

Description:
Deluxe Ski Jump 4 Setup

Version:
0.9.0.0

MD5:
df84366b8abdbb41e07c7396ebb11f69

SHA-1:
25e5821e75d00ec0c349d8d9b34e58d8ee058de5

SHA-256:
b2868905971c30384fc8aea0e506dbfa6b69d0ee3c56f55649e20a22b699cb9f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/1/2024 3:30:56 AM UTC  (today)

File size:
6.8 MB (7,154,603 bytes)

Product version:
0.9.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:q2/mZZjnnyMkh7wyn7dMO4AD0sDr6ITKJnSPMgJmacl:qlZZrnohJMKr6iunSPMgJmacl

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file skoki narciarskie.exe has been seen being distributed by the following 13 URLs.

http://i.download.idg.pl/fannef/8052e761f91be4b0ffaa4edfe0f70ca3/587a4ec7//zx/cyberjoy/dema/d/.../dsj4-beta-1.exe

http://s10608.chomikuj.pl/File.aspx?e=pSglqHOQ0_-QZ0yzM7ij4bSVCckQJO__xwH0wRJmD8UKg_IY7oYaXrRaHAycc2Oun1m4tm1lppWdfLv4RbYGOm63q7FFJGuoi8Qzslj1uPPVbI4Ff9Ws1EgkjOqg8Rc3tM3WwB6wpsL33AA93jKyxkvi6GOqBpiXwgr3Y10ISa8&pv=2

http://s10306.chomikuj.pl/File.aspx?e=pSglqHOQ0_-QZ0yzM7ij4enCPpsdx4-jWZTSdmlOApdsiXixFJBl3bRsQ1TgNsYgLUjl8d8n5cW798_yzKLLlQracRcH5G6Y7752XFJ92BkZ74qARPG9ehos2C-VowxmjTu8VeQh1Cd9v1mFGnNB3ewTtxInKtnblg8SivUxgtk&pv=2

http://s10608.chomikuj.pl/File.aspx?e=pSglqHOQ0_-QZ0yzM7ij4e2One9dpU0qRgRDC8I8m--Zo8MgTLOoVRhOnSTRq1ofDgwPBTDxxVPVlkSeSneiSzBH3G3Q7c1MNT9LidAA2VJpjIbXqcI7LWwa6cvWOC5KKXFcBmPjR6Bk13V8Ol90eg&pv=2

http://i.download.idg.pl/fannef/db68b7f5bc1b56827b80a874db864e17/58486ea4//zx/cyberjoy/dema/d/.../dsj4-beta-1.exe

http://i.download.idg.pl/fannef/41462a64ace79a93fbe17538cb72226c/57d5975e//zx/cyberjoy/dema/d/.../dsj4-beta-1.exe

http://s10306.chomikuj.pl/File.aspx?e=pSglqHOQ0_-QZ0yzM7ij4enCPpsdx4-jWZTSdmlOApd36T3xVvAKsaoOjHx98J9INliljvsPLE9cQeki99f3fPBkw7lYk4PzH-2kf2wBTPs-1ZT8SkAqkb6N4desvlc8ekPrGn5eJM5aSyI2sZ0r0w&pv=2

http://i.download.idg.pl/fannef/3e81d18d181b7790914f593aabf9d61b/568f3558//zx/cyberjoy/dema/d/.../dsj4-beta-1.exe

http://s10306.chomikuj.pl/File.aspx?e=pSglqHOQ0_-QZ0yzM7ij4QRwoLPWb3FloJKg-5ETjBTZO5atVJpOjnQILloLdijDtK_g70s6bKlgJPB1vR3xc4_aPnBruLRJWhADe1PJ-luxXkoJ1OiahAIKeaVkXO87kMJgxJuX9QrE4KsYJYlP0Q&pv=2

http://s10306.chomikuj.pl/File.aspx?e=pSglqHOQ0_-QZ0yzM7ij4Zd0GJA-pvj4zM4q9D2VSYuTUQUgUJMHhUW7KfvwgSvQ7TG9WGAv32AcyFukiuU3EWeG9VMugTA8smlvsPLcjacDvnSrkWWcYKQwTyVT_Yt2C1lh_vFS28K1BO0NrNRaWg&pv=2

http://s10306.chomikuj.pl/File.aspx?e=pSglqHOQ0_-QZ0yzM7ij4enCPpsdx4-jWZTSdmlOApfY9gLCXS143wjd1tm3BP-Cyw9hCgK6StNNfkuqIVWPVyGI3K5GOxJv1yPjHX8mBG22GQrpjFQrDiSqyIxmR3eY5hjIjlWExYj42SEyZ1dk6w&pv=2

http://s10306.chomikuj.pl/File.aspx?e=pSglqHOQ0_-QZ0yzM7ij4fdKsLsucJGSMtlP7exl1jcJVleG-w1raJRi-q2jK1alw3748QFB-8lR2qMuOW3yKNpNM4buEO0vS8QT1pNI0y0p-UJO7exAxzdiLJXzj01e&pv=2

http://i.download.idg.pl/fannef/b5472fdf99a4eef7a27321996753675b/56cc624d//zx/cyberjoy/dema/d/.../dsj4-beta-1.exe

Scan skoki narciarskie.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.