home

trickshot.exe

Trickshot

Bulldog Interactive

This is a setup program which is used to install the application. The file has been seen being downloaded from s6724.chomikuj.pl and multiple other hosts.
Publisher:
Bulldog Interactive

Product:
Trickshot

Version:
1.00.000

MD5:
52613facb5c4e78786ff5d09b4eb0865

SHA-1:
6b7050875f2a1504deec9f76a1f9daf6898b6b7a

SHA-256:
2672fe2a671f6c84dde2a93f376a8b15efdc945bb79d49d2c81535c7c0b1b89f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 8:55:36 AM UTC  (today)

File size:
15.3 MB (16,070,041 bytes)

Product version:
1.00.000

Copyright:
Bulldog Interactive

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
8/13/1999 6:52:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
393216:FXtBs5zDWdlTuXcKwIPgeK4zc16v7OPlfv39QH3XYx8:HBIKdl87IYofveHV

Entry address:
0xEBE0

Entry point:
55, 8B, EC, 6A, FF, 68, 30, 51, 41, 00, 68, 38, 17, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A8, 53, 56, 57, 89, 65, E8, FF, 15, 90, D4, 41, 00, 33, D2, 8A, D4, 89, 15, 58, A5, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 54, A5, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 50, A5, 41, 00, C1, E8, 10, A3, 4C, A5, 41, 00, E8, 94, 01, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 39, 01, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00, E8, EA, 27, 00, 00, E8, D5, 27, 00, 00, FF, 15, 94, D4, 41...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
78 KB (79,872 bytes)

The file trickshot.exe has been seen being distributed by the following 4 URLs.

http://s6724.chomikuj.pl/File.aspx?e=0gGi6IbouwlBW3QVCNRGl-SKTZ16KHmd2zDZSi-SNsiX-9IgRgAkePQUhC2OaHkB1uMml47fv2W8V_jwkgQS1_ZrREo4b5wMZyh2nWJktwZ3VjSXOSSa8vTXyoMC61dNlffeYYXC16uNWFzmRVTpaQ&pv=2

http://s10597.chomikuj.pl/File.aspx?e=0gGi6IbouwlBW3QVCNRGl9BpQFpAwr_5WGQ0Ic5EMVIlDlAz5HWcINFVP4kVeP5ekZHLSsMkTZfIoUoDEMkE3gVBoOefhquxDJSpeJieI8hyPU7f_AeokXdZMGIgWL93882OMO31Csn_YK99C4qrQA&pv=2

http://s10597.chomikuj.pl/File.aspx?e=0gGi6IbouwlBW3QVCNRGl0oTZNJJt1-xfoSE_x30LRncbZWrFZTnP_uHZxjFOK_jX5SQr_0XWFZH_ejos1v78h6uqyEULqZyswHkC94BVBbCpFlkjdmhHzW2NR3XlpRkAqNS_0BWBSQv5fv83ALqDA&pv=2

http://s10597.chomikuj.pl/File.aspx?e=0gGi6IbouwlBW3QVCNRGl6l3Gzmtrp8DeqWki6qPd_kyeCdr29iz1CCvGAXD7tlGjcFtFgm4j8-y3vN7lb-y9xwhH6GQhEtfXIdhFF65Nn5oxSXeGO034szNls1penZ6nqxjnXhYTr9iuCfotrgGmA&pv=2

Scan trickshot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.