cardmaker.exe

Business Card Maker

AMS Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
AMS Software   (signed by AMS Software)

Product:
Business Card Maker

Description:
Business Card Maker Setup

MD5:
f46d75b86aa27c695cd3885e5fcfe50a

SHA-1:
aa7164d3856fc8a5c9b9ced2c84128379096a00d

SHA-256:
1de7aef1efa8080d2ca907ddc2825c641cd31c552a2df4709a9880c9db3b7589

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:36:38 PM UTC  (today)

File size:
31.3 MB (32,839,992 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
7/10/2011 7:00:00 PM

Valid to:
7/10/2012 6:59:59 PM

Subject:
CN=AMS Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AMS Software, L=Yaroslavl, S=Yaroslavskaya Oblast, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6D3488ECA5D32CBE8A942A4ED7C39EC5

File PE Metadata
Compilation timestamp:
9/16/2010 4:29:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:kjXITJhconJhRQYykJL8s1p8a8EL7k1y6nRWJxC20sjhcO1v2gC:kI9nNHn53ZJxC2LFcSv2gC

Entry address:
0x16450

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 18, 56, 41, 00, E8, E4, 03, FF, FF, 33, C0, 55, 68, 1D, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D9, 6A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, DE, EF, FF, FF, E8, 85, EB, FF, FF, 8D, 55, EC, 33, C0, E8, 9F, 87, FF, FF, 8B, 55, EC, B8, AC, D6, 41, 00, E8, 1A, EA, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, AC, D6, 41, 00, B2, 01...
 
[+]

Entropy:
7.9998

Developed / compiled with:
Microsoft Visual C++

Code size:
85 KB (87,040 bytes)

The file cardmaker.exe has been seen being distributed by the following 38 URLs.

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1481233660&Signature=YwyzCmDWqX4B-JWF~GHSOxacFJVa8EXG0mn8TgnBSt7eyDVI~Wm5QjPBuNN9GU2F6ZGwCKfObdPT6Z4xmP38g12~j9Emb0PbHKClR-iV4lKjx7c5rRmmuAESSPLBYqo1K~ywz24VjV2qwTHD9FRZcpXkzMDlpoZeW1UhD2AhmW0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1438394420&Signature=F0gEi8qdwnj2nFMMiA5tDPJzbR~SeeaInIgxBWyB1QNZLWo7VGj4rQR2pUt6KjBWY7P91bR4Y6sbFjpdMkg0EH0tmeHwaQJcmx6R1~kY7M2TeuszbG77Bw~RuP8cxrje~WSzc6XxnqLfepdPKGXmzG1EAVs4BY5UBcXR6U7xznE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1477060590&Signature=L35MNbtBjamwlMubXZby-DWpCODqlJ00uYUPyaXz8M2gn6~quHVyBFip~HEGsmL9eTsGgxEgsjlNRZsPYTnsnqQfqWE0bR5HZsBkYK~wb1OgTm0V7Oerd81rqR62FUqw2LuUdM9Kv6tmbtsf8ZkHaLFWPpCtp-KoKSFLH-L1yNA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1423156624&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=dlEyBYunHFnvRGg0Ulq810rE9E4Ebb2UnYHNISZThyEomvRqA4GKeONGnjKAf5155Jg2NQ-bHPZspTTjTJXcCe8G1rgM6K4jIDwgqUCjV6KDhs6COcP4Y7IYQ5KJ7qkkMVHbL8rMgC0vKJXlX4pSbJMOnLpnzsA~0YF0unHuULI_&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1470773241&Signature=YZq6Tq0SALi9lR-wT4y-24wxykyfUMT4xVhl8FxU21e6gLK114cYaGIE2Zlt2d2nRVupHOTPm-fxcpkOOzP0itz0Wvc3JWczNjo7-ODGJKe2q14dPiHjHqGHq7IZLcKMYoo3tCTDiA3tXRpYeJWTYYp9jMnnV1RMg8m2vNiajoE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1441992293&Signature=gfLlB4MF4~rHPVcu5jpGn4N670i1xPzvDFabHXrNlpTI90BPxjbye7J0gFdl0KnHhwroQ7nQ2IL3CWCMKxF6xZRocC3cXqNfyxyoP-06mtBgNttd5WGZTsSIsknC9d6BHZ6HG9C3LHiTtey7cbrva-dJjiN3aaAtinsXzZL3DWo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1449310647&Signature=FnUPchUBGSOh~XH83wUcziekliA-r2ppdHNttWIcImaE~zP1CL7JMuDABba4QH7bHn-LLmJ~RxZoS2LSQnTISE2q54fhJiLAQNnqaIQiYahF7BCzt2MCHBFV2G3HoxBBYV8iV7riDoJj9chMkU6DWT6-wM4z06a2dODU8GLia1c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1478154104&Signature=BcLcHK0XIbA7-Eca1F57t4jEG2yOo99IK84K1BCCdzCT0Ry1wtPbnOwAkoFVKkK7A-tBkhfPQcCxFXuqWE9TDdpjai7-lLS41dLntOrA2MXRj~idDkrebFnPI6LYIoZZOSsAgWa54I4B8ryIii74cnPr-RMteHy-s6~x-Bh7kHI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1477654446&Signature=F2~Bf7rlbAmCfF0mjyhZZjytpXalHGLsp530CIfjOQouhDlNrJGe1bQPUx713Rfoq6I9kvLGC8UVCLyHR5jjHQioVVP~48YN65aKR-Uz0RK0DqhDfPlXeGENdbQls5N3HtMoJriQWwr10bdENo4bjNWzEG9K1SnHX1e5dPMJpWI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1444431085&Signature=CcRx4G2NzV1I1xlwR142DSDi6v-fedNV6yaah~-t9lIc9F-5QrOLJJuFu28OQtTx4Tcq5-RBvw7-8rgfzH1IqNog~rYBPXLT9~kslbhdHjxgc3WTMrsndM9hwDnLpB~pDaE0Fz9OSggetSZ2eXzuWgFeNq671g1ZJAav8YI6Rt8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1472736773&Signature=VcHPVli2~foHZWG7NtC13PEn4gW-dBRkyuZ3cNcjsBu0TvbnimpBCc-ZgI2JOWux9eVnf5CPxYSfF~6vaa0yUZ5BT9xTwUMLADI9JgWakN0pX0D4a8l4MEJg3QYLy76Q2nQGONT2Pj0raTP589sSEU10bPzfdNUVFfQVMvH52E8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

blob:http://sd-web.softonic.com/43f00eb2-cd75-48b4-9f0a-8757efd9fdc7

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1475818127&Signature=Hcl8gsUGcdnaNRNfcCb2KxYYXIoQAeaWVO5~CxO11F7JDKvk-LkrSxtfL4Y50s7kjMgelEyu~I3QShxClGoknsIhibEDAMul49UU2yJH9ZjkLnWmucNX3c-OCP9mXK9FVFSRzPglqMFRhPEXo3IOpuREnKSletyX0wp2bAhmDZs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1469971959&Signature=GTZVWFhd7EwsncyLsBGYJZQBQXrRPOthxuy3V96~W709BA12wtgRv7pqUIDm4GSksW001DPglOeEs-cuhGQzQg4PKhlY8JUG9pqNNRO1-S53ucdLwFPz04LlJwyj0iZkYIKwCf1Vy0Jj2jlO7~jj1cBbjnExULg1aWGETGkah88_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1434440494&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=GvYGq~nfLpYeYFyYrDS2zvuijDKqF8wGyMXHqdKwlVtjNvajmHZzYkw7Yn7WjNMpNJq2Ys-XNhPjHLFR656Q1-3uT8JZdywIusJbCEgzDRPMZcsn9DicWKxcCurSl1rCebJh7wo~F0Z0PKlKvwhhGjSJH04jZFYGEkA0GFtPNKk_&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1445788971&Signature=haFu5Sh4s3zlNsKbpa4SwAyoA0NQg-ejp51ABDOQ~FQXUQCTLDuBr06fJrjAvBR~qKnMiob6SkEToC6ZNqK2JquHneoSS10k90mMlKDNN6HKZ6fuyxCcHEjOPOOMONmdVkoX7RP~mLobY77ya7umnSg2L4UC-Q3j8w2LqiaAgUc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

http://gsf-cf.softonic.com/aa7/164/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340689&instance=softonic_en&type=PROGRAM&Expires=1461416726&Signature=DrmNolckXW3q0Bvl35-pBh6YMUWjN22UOenCMWD6BX64JubWVdtygm2qDO8zwWipgjSNnH-ZUhEzN7veR0Q6ZIzPcKoi7Hdzms2zlL7UZ8BxKEjL~TjUUNlEBJ-fK0k4fo6HRJtbhdWTpWRgONXIa4kahzwk-KyPM12iAHrQcr8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=CardMaker.exe

Latest 30 of 38 download URLs

Scan cardmaker.exe - Powered by Reason Core Security