home

downloader_wizard101_fr.exe

Wizard101 Downloader fr

Gameforge 4D

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Gameforge 4D

Product:
Wizard101 Downloader fr

Description:
Wizard101 Downloader fr Setup

MD5:
3c01806b5664555481519399710db736

SHA-1:
94b2e39aa24cd1ad26a3d0436887a3ef021e7720

SHA-256:
9c122f11db0dff8f051f00a0ca783580ce4694aac0aea1992e1eeceef9474b78

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:47:39 AM UTC  (today)

File size:
339 KB (347,102 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\downloader_wizard101_fr.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:h/na4ku80QU+AWVIPsvtFyh1J2xEsPgTnbBvcCcU0HzJBElYTeYyjh:5na9u80QKcVohmRoFcCcpgwTyV

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file downloader_wizard101_fr.exe has been seen being distributed by the following 25 URLs.

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1485050117&Signature=HCW6C10NM-NkCHXN1wHIgARcvGZ-D~Dl~AXuw4b3Tfrh-CRa6~cPpKB3pZd84vus9vQQbxlA4ThVkNdvkZxvNfL8rrSdXtyYjxG3uRoOf4schB58IgXNx3O3k9rNobXM1K~xvgaIANDCnY5GFXGw9BTTojw58rDetue1ffNqycg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1482401866&Signature=MCkBbbNGc~3bj90wkeAr0GVzWfE~akqPYGPbVyGQooA3uYYDiGpH-UTJLFWZquRAAUwuI3IWL263ck2HJls3i3Fl94Klncx0q1vuOn7w2uKwDvPV35oy6B66YIuLHi4esT00B0Fv9NcUaUnDiDPPXmsp2d9vAg5MFAlUTzrMqGs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1484360647&Signature=eaiGQt0AHJFRokjJBAR-Bb6Nkxk2-LoJ0lD3nQzVUO4rSpV2Rhnp9HqzzK9rIcrEZ7PeQJvgNPKUedh0X8Q0t6udAT0PVwdOSsC0PwCZh4l7UB4Vpz-KmuRh10tnHft1y-Dx92DRtJ6DCjX9Afw8gyDsLuesX6Gds5pSiFK9FUQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1474714012&Signature=KqDSnHaS4bM0lRLXtfYeiBvqu4ocwP1l4DyXg3CnCcLMiGxIh0o5ZEAJrEKVotVcPaZsDJrKVGbGXhDx-ekJugRJDwkfcMPrHbQFhGt7DqTTTgc6ZGbGFlX8u50OtdA6Z7n8os-U4t6nuzr8q9051ANjZzeZnqU277vUYmTu3IA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1477417685&Signature=V5By3fPFCeBHxEL2CjLS0QmMMhSWyUiHw8Qaj~mWQPbY7T~4jekbAfwgRMvfdhBueQT0mbbLQax4DKY-3Hg1F1l4Avg7s9tzOsNIsV6PomGP2A3tUBQVPMfVvKVB7NaJUpVV~8FHYzmvHQCeAHh8SYckt8OB3OB0PS68umDLaUA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1424426259&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=bhTvz~d1gS0Nt3qOzuiYx3hFBfLy5M9QggJ2nQ9ye8aUvji-OJB1WoQ~hO~LEjVqB24fl~6FFU0hALEUgKcT2-FJOVWU1mm1t6-8sd4FD-TLJo53XtlfLURYJo76g29vWwF5t~MXUqdNtA0m00zvQWXPKRDgvc14Ci67yIcMsFk_&filename=Downloader_Wizard101_fr.exe

http://download.gameforge.com/wizard101_20111201/clients/.../Downloader_Wizard101_fr.exe

http://global-shared-files-lw.softonic.com/94b/2e3/.../Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1479257273&Signature=R6fqxiF70~NdtqAz7DJ7EWsvwwTiUDJwNuj2VnL4ZwKAmhhfEGK1eeuIdegXTHafLiZkc9hp2ElyD0dseHojc6uIjupEoI5aPp2Mz2Pc09KVUgK1P3woD3kKVgvZt7zg5ruGEvk7TOkyzB3qxK5K6v~s4RKM5LmXijCgByNI6sw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://79.110.81.138/wizard101_20120815/clients/.../Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1469055924&Signature=V6q4TbOa5dAizLe54aar2PgdTxkiCxwEwEya~wPpEgAWChf7Ok8bg0fS62spLmF1QCX~L0fAunSjXdAGGhh8cUKhfmVqSsmrcboL2C6dIyxG5xjgWoqbkv34iAo7GnkWyc8-JJjbRPyxyJt~wwHxOjqprDd53Nf7TowQObxZhak_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1466661268&Signature=OXoEz3BR42PnSzRUoL-7mnMLIYk3ykRzDkTY7lBTxyIlUuIoykWSzuV4M9BViFMfZUEh54OMXF9X36g8oFzbh2Bd~Md4QRubQ14cQx65GaEV9jCJ450dpGJaE9V78VTplxoCP1TZoC1jpU0gG3m-05h6basi2qcbgdlTb13M5Mo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1463901509&Signature=UMk4rSMfXUucCducw6fJEIx8Dcxx1z~5RnwqIWOXS08Iy0w-aWKHT6DjK49lWTzAWuJ~dzOoWZutwA-6ABWgaAEvRWcVNB~Zw4nBzuMZTPkAVA0I44cBZvYHfChbAS7ADCB94jg12BiNnjpwWXDE7qqHYOrYlDmWiSWpIHrT8Sk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1458964289&Signature=WcBdyGvPWImMlmpZPTsYnVvyCSc7Hztp-KtTQT276cZC1xvBa5bAyEcYtE8aEuDl~~bHPhR7k2uezyoLo0m7C8RHnZbZL7TTJ95GtTONgMZx2Zj2u3EIJmUs9CnCmCrshzH7xx-3veS0sxLF03C-10ZNZSbwSyuoXgY7AOvVQJc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1454726837&Signature=Ub~dzau1D-l65awoq5ojc8VH3VNfDO~SwasQ84pKwjJ8g7lbh8we89iq~tv7encq3XbSymgVS8hHj4OE-C9fYF1HJ~Pan0xOE2ZUgkySF2wQ~YEWydXLWVB5OzsRYRzkTt38bYv6LZJJ7h7R1q8DvewY6277RQWrXPS04ELeWtg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1466121516&Signature=X4YTWnX4tlFqZ51qvylVr8FYOxjPoVhbD-9NiPQiL2YWCVTT6LUNM~ol-VhWlkLCy9SHGMZL6FBy1KCK1lHCD2PWwFe8eLJLQLI-elM9CGrezWE4As~ToVeAxrQpNR2aW7KbPR8fKd4EIyUK5huuY9dW~5DGzMZthFD6xr1nLWQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1463859227&Signature=V-Y6tXDx2Km3vNi7LH9XqyIT-sNTvJrE~idYBPFgZbgCl5GoyIyCCiiRsURxrZrZbLCSD3UIdbxLjI7mxSfweKhZq000g-VHOYMKm2WnZimKfIAjt4zgKDs6a7Jr9p8BIvUaJbYxkxiGvUXHg2IzzS2XytFQUSHs8JhU0TJ4jrU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1446894231&Signature=Ss7Q1DNLgki8TVowZCclHdIHaEJ~1nVunowzcyVYUloVXnOcVLDTbhtsKol3qAhx2HbqYQa2kGrWCVFFoRWWqryBAYI7ukA-JZDosnpFGsaV9I7y0qPRrsu8AE65BLoqMk6U71tvCGatB5hTKSv5VZWYc2EJdVkGmgRkvJThRvs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1440268180&Signature=aj4DnG-MWTBrc-MY5C2u1VSIPgmFHRtNoU71qBsFrSpeX9a0Cic1FTjZSovNdLtssVpOZqt-Neb0QCgMyBT4s0SsGM3bkkW5K0FKAMtiuuSn9aTvfVaMSJikI4Mqsn6~oC7pRJlDVcpdBfHfQmGzbl~2Az9ZdDdyXw9BqgUIl7s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1460088665&Signature=YX5ESkOFsd2xHtCWhLASkKCXA5HzBSwVDa-SdagEEKdk8k~5833B~b0r3r3qNu0EvoUslPaZJBmhg3Llo4PxGfxX1vTCSEera7WgCs4O6dX4R3A4SvqjOimVoTN2bIfY42RiScTyFy6kEljQgfbOw0QYKt8IUO8zYHm7ftn-h6w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://download.gameforge.com/wizard101_201204261/clients/.../Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1456267042&Signature=hpgt3XhECdvTyb8lJuIajUZZt1D8HPn418mGkMkyzuzgkmxBfUMuu0rLOJt8pBPkD34Ro8FpO723nIBWAug7Wyxg2~I9lRazILVYGkEHV7s04gNLJBlXvijMACu4M3AmGcX5RCiAJvq29N7QbNoMawaT6O0x1lWOWjafFmYbU~E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://global-shared-files-l3.softonic.com/94b/2e3/.../file?nvb=20141202152728&nva=20141203032828&token=03a3dc678b306b748008d&instance=softonic_fr&filename=Downloader_Wizard101_fr.exe

http://gsf-cf.softonic.com/94b/2e3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337568&instance=softonic_fr&type=PROGRAM&Expires=1442965865&Signature=E7Z75y0XDgx4pHfO8fAGxET1Q~xJIW3BFnYB4-hLsQ9JqaWbQcKFbrwn1cG3uaiFH5lJDYl35D9N2WKQ6b526Go87H3-7SncUQumHXzHQoaagL71QnDTeZrBdtirUfUfFg0v0cH96axL18kZFiAMNFDrEZ~XV00csGHEa7lxx68_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Downloader_Wizard101_fr.exe

http://download.gameforge.com/wizard101_201203272/clients/.../Downloader_Wizard101_fr.exe

Scan downloader_wizard101_fr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.