home

chickeninvadersrotyxmasdemoinstaller372.exe

Chicken Invaders: Revenge of the Yolk (Christmas Edition) de

InterAction studios

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
InterAction studios   (signed by InterAction studios)

Product:
Chicken Invaders: Revenge of the Yolk (Christmas Edition) de

MD5:
d7171a3f1d7fae54a67f6fb147bf39b5

SHA-1:
4ed875cb4cd2a7fb505b4ef17fa6db7c4af721cb

SHA-256:
950cadcfa5450424149c5da9611b7500030a756361beed73087eca5984d06de4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:50:46 AM UTC  (today)

File size:
11.7 MB (12,313,656 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Digital Signature
Signed by:
InterAction studios

Authority:
The USERTRUST Network

Valid from:
5/22/2008 2:00:00 AM

Valid to:
5/23/2011 1:59:59 AM

Subject:
CN=InterAction studios, O=InterAction studios, STREET=4 Adrianoupoleos St., L=Athens, S=Attiki, PostalCode=GR 156-69, C=GR

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
1B8F42B8948616C709A52980CF157AFA

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:bjVjp5oEMz3HzhDS3CpBq955AjIJVljg/kJCPvfH36DEXw+tUdIg0D/oDezxMV3F:tjpHMD1aPAjIZsiQvfHWn+tor0bo1ZZG

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file chickeninvadersrotyxmasdemoinstaller372.exe has been seen being distributed by the following 7 URLs.

http://gsf-cf.softonic.com/4ed/875/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30876&instance=softonic_en&type=PROGRAM&Expires=1431712613&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=DR~EceG3C6YfE6EbOB055~hYVZkuaG4RLtQSJYtXmloqH4mAd9m2aMVPRYSDNXSRAWw-En0HnpgFumiaSbIYs2i2Aoe1osafb7H8eZkpihz3FHqRYsZUQq-KUqhlQkiIuhWJlLJX-reqJW2iVuKNjHb8Ze~ycrR6ThA8WHpuSY4_&filename=ChickenInvadersROTYXmasdemoInstaller372.exe

http://i.download.idg.pl/fannef/f40c166f30d203c305885df72d9e58b9/580e121f//zx/cyberjoy/dema/c/.../ChickenInvadersROTYXmasdemoInstaller372.exe

http://gsf-cf.softonic.com/4ed/875/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30876&instance=softonic_en&type=PROGRAM&Expires=1428540509&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Owz-NzD2yRhcsjoy0tk8Kj1H4OzKueV47PXET1-z7gajyMBS5Ri4ZNzII-n3jIeVVDULXS5H7sVzmtCsyI0noUHzFtMhpbGG8EGYk2A0yUeBgOQNQEiIY-yODQ2hsz9bXC9WixhQ-Cju6fzpCHBX-uxdkmfSA65yFu8DunHeaMg_&filename=ChickenInvadersROTYXmasdemoInstaller372.exe

http://gsf-cf.softonic.com/4ed/875/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30876&instance=softonic_en&type=PROGRAM&Expires=1447620825&Signature=Dtzp0CV497a-QL3aS4xsV3b-GWJZ1u3mkyRkg7Bwa9Z2NpU681DDgVbVNCVdl1UdtlwFs7anTFIhGI2-BWa1R9PeeQ4iiVZVjO0Ik8DvopjhCNTgr6QsMFk6L5w2HpHrO5kxA3Ay~DI9qwUsEenMFl7Na3wYL30xx6tT0Z7vJpQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ChickenInvadersROTYXmasdemoInstaller372.exe

http://gsf-cf.softonic.com/4ed/875/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30876&instance=softonic_it&type=PROGRAM&Expires=1445744793&Signature=Fn4l4JSnj2x5btTxnuFYYi7CQCwAzU1GIsRQT30IGyTnZ~Jw3nW4WPFo8U8pFZ6ogzGPjSF0gIQ5WLPeF29pRO9Mygw2X1OwbUDOIVXre~BUIpwlFZq~OElUHSpxF~KKetM9FrLnlyxVBtqk8uga9bzOqzy~9aOPCTve3kocjpo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ChickenInvadersROTYXmasdemoInstaller372.exe

http://gsf-cf.softonic.com/4ed/875/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30876&instance=softonic_en&type=PROGRAM&Expires=1431164911&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HSo43feLAzcpHRpN-DU8rt01vhI6P0~vicOV3a6Bizgz8EAYgYX-ZH8eLxdk43CLYYdETrtc9pXZhH87hrbKP36T44-So-uExQ7gtoV2cGA95lhp-UDvR4Tj44Je9VaPW9lBHSAzoT18Nve8UImPQm4eHoPdUF8CpyyaF6YIebs_&filename=ChickenInvadersROTYXmasdemoInstaller372.exe

http://gsf-cf.softonic.com/4ed/875/.../file?SD_used=0&channel=WEB&fdh=no&id_file=30876&instance=softonic_en&type=PROGRAM&Expires=1431406997&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UVsRCNjlPNhvzYkqyFVME89bBijWoBoQ3kgGKBMR~wxCTqrMGg5NHF0jEDf78NH-3ibm0qlWonUdMGA9UI4Hyt4fFjgI8dQhXHH81NVxlafbRuSMpGCXOkcFrSS7tpLq9O~Zs6jXsr-KNmWQlftAX1IwJrWVT56HRZLEIGx6vdw_&filename=ChickenInvadersROTYXmasdemoInstaller372.exe

Scan chickeninvadersrotyxmasdemoinstaller372.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.