home

uk_tron_ss_characters_pc.exe

ScreenTime for Flash

ScreenTime Media

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ScreenTime Media

Product:
ScreenTime for Flash

Version:
3.8.3.0

MD5:
c9884479aca63038da50724c32faf8d5

SHA-1:
946c56dbeedb39c0e519f66b90e98c02b2c49a50

SHA-256:
922ee8690ec6f97002a0d30d0b6766ba06737c7360ed8db4161f48c54ad7d41f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:56:23 AM UTC  (today)

File size:
4 MB (4,236,775 bytes)

Product version:
Unlimited

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\downloads\uk_tron_ss_characters_pc.exe

File PE Metadata
Compilation timestamp:
6/20/1992 8:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:zQswIp4SloYpexQ9tUbdU0GUvqrwILQiTZ+W49gAK0vyhUkwkgwdesumDT/JJJSJ:5NpdjfC1GUqLQuZyM0vyGktKsuyNzG

Entry address:
0x67F40

Entry point:
55, 8B, EC, 83, C4, F0, B8, 68, 7C, 46, 00, E8, 90, EC, F9, FF, 33, C0, 55, 68, A6, 80, 46, 00, 64, FF, 30, 64, 89, 20, A1, CC, A2, 46, 00, 8B, 00, E8, 8A, 9A, FD, FF, E8, C5, EE, F9, FF, 68, 00, 01, 00, 00, 68, E8, BD, 46, 00, 0F, B7, C0, 50, E8, D2, EF, F9, FF, E8, 4D, 7C, FF, FF, 83, E0, 7F, 83, F8, 07, 0F, 87, B2, 00, 00, 00, FF, 24, 85, 9A, 7F, 46, 00, BA, 7F, 46, 00, CE, 7F, 46, 00, DF, 7F, 46, 00, F0, 7F, 46, 00, 01, 80, 46, 00, 12, 80, 46, 00, 23, 80, 46, 00, 34, 80, 46, 00, BA, E8, BE, 46, 00, A1...
 
[+]

Entropy:
7.9214

Developed / compiled with:
Microsoft Visual C++

Code size:
412.5 KB (422,400 bytes)

The file uk_tron_ss_characters_pc.exe has been seen being distributed by the following 4 URLs.

http://gsf-cf.softonic.com/946/c56/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304507&instance=softonic_br&type=PROGRAM&Expires=1461389574&Signature=c-JEHW~klR-CaGY27XmP7wAZm5P89JY8NVdCf2V81sVMT7MlljDsOGglaxmCpr0ZjWrn51UugqMPLKZ3l60LK~M-TxixyrbAMB4R9aOLlEYvP9EgJj9Q4gG49kqRfgh-Mma0vF8k35kA4H4ZPz6fX4hRputmeP2pRUg6Y8bkqVo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=uk_tron_ss_characters_pc.exe

http://gsf-cf.softonic.com/946/c56/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304507&instance=softonic_es&type=PROGRAM&Expires=1447134950&Signature=KeqK9l1yDsyfOW9Q24eHstRRWsIl~KmUYFQilwxitImUcR8mEDYUQkR0lKM98TrcwcqOykX-yAc8BNpTJKMLluE8j~5NpfT-TJBW~CxQUcpkMCwtP1blvYDvTHTpqCZpvdjFRJVKLMbAlLK8wRykJNC1K90gzgk5k70vCLP~kos_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=uk_tron_ss_characters_pc.exe

http://a.dolimg.com/franchise/tron/_downloads/downloads/screensavers/.../uk_tron_ss_characters_pc.exe

http://tron-legacy-screensaver.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtmA3i8PiXd/SgVLGhncSxZHaXj13Hw1 PqLtqeFLTeL2T6ElPKlWdNbtBhvl3 1HU7AS2vOi1s4CJv01tLOmRBFBWzDkRe4GF2zVEcH1VeZUmrNvPnMks11/nSzL0rXKdfKXsaX8gx74BV9F8LupHvPSnHwHUtXKpb8 8lQKFw w7G/.../gKnegaZIvIlZzGSAOZ

Scan uk_tron_ss_characters_pc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.