123freesolitaire.exe

TreeCardGames.com

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from ftp-stahuj.centrum.cz and multiple other hosts.
Publisher:
TreeCardGames.com  (signed and verified)

Description:
123 Free Solitaire 2005 v5.50

Version:
5.50

MD5:
3c8ef19843db5f55c7be8844754b072a

SHA-1:
074814bd4e18a8a218b7a8d86f2357159322f7f8

SHA-256:
66cbb46620a5aa6340a2e17633953ee883cc3c28c118087f097ded2cc8625853

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:44:12 AM UTC  (today)

File size:
3.5 MB (3,645,968 bytes)

Copyright:
(c) 1988 - 2006 TreeCardGames.com

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

Digital Signature
Authority:
The USERTRUST Network

Valid from:
3/25/2006 7:00:00 PM

Valid to:
3/25/2008 6:59:59 PM

Subject:
CN=TreeCardGames.com, O=TreeCardGames.com, STREET=C.P. 187 - Poste Centrali, L=Piacenza, S=PC, PostalCode=29100, C=IT

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00AF87622FBF939730BDD1F36EC9B7FC45

File PE Metadata
Compilation timestamp:
4/8/1999 3:24:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:aD5NdT86q/lkyfsv1czFbmTQN7ysk85MiMcFTGSFVrd:aDtT8h9kyfZz9mTQ1Dk8kKjnd

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 78, 05, 00, 00, 53, 56, BE, 04, 01, 00, 00, 57, 8D, 85, 94, FD, FF, FF, 56, 33, DB, 50, 53, FF, 15, 34, 20, 40, 00, 8D, 85, 94, FD, FF, FF, 56, 50, 8D, 85, 94, FD, FF, FF, 50, FF, 15, 30, 20, 40, 00, 8B, 3D, 2C, 20, 40, 00, 53, 53, 6A, 03, 53, 6A, 01, 8D, 85, 94, FD, FF, FF, 68, 00, 00, 00, 80, 50, FF, D7, 83, F8, FF, 89, 45, FC, 0F, 84, 7B, 01, 00, 00, 8D, 85, 90, FC, FF, FF, 50, 56, FF, 15, 28, 20, 40, 00, 8D, 85, 98, FE, FF, FF, 50, 53, 8D, 85, 90, FC, FF, FF, 68, 10, 30, 40, 00, 50...
 
[+]

Entropy:
7.9985

Packer / compiler:
Wise Installer Stub

Code size:
512 Bytes (512 bytes)

The file 123freesolitaire.exe has been seen being distributed by the following 20 URLs.

http://ftp-stahuj.centrum.cz/dl/82622e9b235d237d62f04897125778ff/586b878b/stahuj/download/software/secured/1/123-free-solitaire/.../123free.exe

http://ftp-stahuj.centrum.cz/dl/93b247097aad7288cab8dc6c0269b19c/57e287f6/stahuj/download/software/secured/1/123-free-solitaire/.../123free.exe

http://ftp-stahuj.centrum.cz/dl/668593c2831339fbcf1a3654f5b884b9/581ddf24/stahuj/download/software/secured/1/123-free-solitaire/.../123free.exe

http://s5923.chomikuj.pl/File.aspx?e=WFMOaWpU2xP96iYRulk5S_xGAxBzmxP1EjV1d1nqTHTRt7wMyRbNnkE-7ykBetgPJ-_gcn33EVvKJnyrJk6u41-IY6fKwA2SCiwOuxx1bvIU6AN3WHOkdGfM7LVLSDt0Izd7c73kwCyXY5VtsgRzAg&pv=2

http://ftp-stahuj.centrum.cz/dl/202d7b1048f2798f2feeb46d6e7d0ed9/52bb318a/stahuj/download/software/secured/1/123-free-solitaire/.../123free.exe

http://ftp-stahuj.centrum.cz/dl/c909905c514967bf21d249471083719d/582f60f7/stahuj/download/software/secured/1/123-free-solitaire/.../123free.exe

http://ftp-stahuj.centrum.cz/dl/bd96eccf76d8c9f8cd1afc5c6a6ca96b/5353e43b/stahuj/download/software/secured/1/123-free-solitaire/.../123free.exe

http://ftp-stahuj.centrum.cz/dl/d0e85877969eb084952f67de13cd88c6/5824ba79/stahuj/download/software/secured/1/123-free-solitaire/.../123free.exe

Scan 123freesolitaire.exe - Powered by Reason Core Security