home

install_supercow.exe

PlayFirst, Inc.

The program is a setup application that uses the Wise Installer installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
PlayFirst, Inc.  (signed and verified)

Description:
Supercow Installation

Version:
A

MD5:
a302006ca5772deaabec87ca38d30aa4

SHA-1:
fa075fcf5f3eb57a3fd478e1818114a85ce9468a

SHA-256:
6e434f25552ce80d76ba22661d0e2090af303bbf34c7ce9d514a1ebbc038ea7a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:32:20 AM UTC  (today)

File size:
31.4 MB (32,917,128 bytes)

Copyright:
Copyright 2005

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

Digital Signature
Signed by:
PlayFirst, Inc.

Authority:
VeriSign, Inc.

Valid from:
12/13/2006 4:00:00 AM

Valid to:
2/27/2008 3:59:59 AM

Subject:
CN="PlayFirst, Inc.", OU="PlayFirst, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="PlayFirst, Inc.", L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
34CCE718FE3E8C251C3069CA7357920E

File PE Metadata
Compilation timestamp:
4/9/1999 12:24:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:DVpdYbLyQmhOBjAxLMSxH0vJC6llOlHbD5Wf0M1ZcMXN9u2tOiVIoN:DVpCbmXgjARMSxHglOlM0MYs0Jiq+

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 78, 05, 00, 00, 53, 56, BE, 04, 01, 00, 00, 57, 8D, 85, 94, FD, FF, FF, 56, 33, DB, 50, 53, FF, 15, 34, 20, 40, 00, 8D, 85, 94, FD, FF, FF, 56, 50, 8D, 85, 94, FD, FF, FF, 50, FF, 15, 30, 20, 40, 00, 8B, 3D, 2C, 20, 40, 00, 53, 53, 6A, 03, 53, 6A, 01, 8D, 85, 94, FD, FF, FF, 68, 00, 00, 00, 80, 50, FF, D7, 83, F8, FF, 89, 45, FC, 0F, 84, 7B, 01, 00, 00, 8D, 85, 90, FC, FF, FF, 50, 56, FF, 15, 28, 20, 40, 00, 8D, 85, 98, FE, FF, FF, 50, 53, 8D, 85, 90, FC, FF, FF, 68, 10, 30, 40, 00, 50...
 
[+]

Entropy:
7.9987

Packer / compiler:
Wise Installer Stub

Code size:
512 Bytes (512 bytes)

The file install_supercow.exe has been seen being distributed by the following 23 URLs.

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_es&type=PROGRAM&Expires=1474176165&Signature=hb0bUhaSCPTDolL9t-xrKHpt7MdLQZrECtO8Qe9VwtYMLAFoxHTuV~-cehque3tnB5vJ5JezoAxI8A9aYQHXYGAL87jadmHwmH3HYiKq4nr7yJeECrl8RXry8PVGnzBtUcak0L-YjReBv2iO37Mjg-rv2tKf1Rskjm-6KUAJGoo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_fr&type=PROGRAM&Expires=1478474476&Signature=AUGGgfsTxMHRQeOi4dfIGHojJc7grgpRT0rSd-zloOW458IrOl5lZ5ePw2Yo-cnjYWAuz31tVxtvv-EHgj8MvpD42jAyT0h7PPBtbjJTNymzMaQh7O6DGIlSvbddoEShb7PbsVLeBDvYwgDtQh3r2JN222j03eLot4TC~-ypilQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1478734652&Signature=LFsXXm0JO4Fv20T4gDkwGps0wC5Y2Nayy04NKvHNN45cUdisuXrmydmwvEf~HWycUzy9kw7LQstrhIJrx598rBESxOq4hEt6GP6UlflfGszz7QE6VxSfeRtRpzg6B-tNMb2KPunj7vO6G0BGKQC~vwb-GgQdKdgmYJUvMR-T3PM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1476133772&Signature=IGybC2N1u7qUwxbAXkHtYevZyobNV3MSWBnAPrOlLz81NE4ZUcTEmdic3~qbPsX9r5Gzyz-e9t7Sc~mifL3cX6S5xdprWnYRebBkt5aoOPYIE7~Jl40he1yCl8hsjKEJKfDrBzhs8XwlayIqmyrhwSGmmSR46L-JPTniSZNvAgQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_pl&type=PROGRAM&Expires=1474446856&Signature=OecRlIkWfEuRMoSqPTdk~Kazm6HSZ6I-S0DqlPIFvwDe5kf1R75OjgWxaxNAJB4kW95EUjXCgrsziEEPZl53e87IqocWu7A3vLkZ2TqS7nDq0uvTrlu26Nb5z~MxbC059JgCBY~TkVCB5Go59t7rBxnCL5HmpAgqtUx7noOLzpM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1475986470&Signature=YvNhxw1gsYDjpE1BCRWmZ7BT8KU1U1~bqwDxwDnIJkC2jfx9SJGQG945n4cSi14OcsuYQQ~xvDz1KW2f-9hmVf1YP2sHx12ZaGDqWotoFnh7K5Q8xmfMKoLdVS4Hp31KgSlt3qMycb6bFwUIEYzIEQDd7gtadLPN8k6yDXwMlzg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://down01.wxsrv.com/descargando/024/1621/super-cow/.../super-cow.exe

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_br&type=PROGRAM&Expires=1470401582&Signature=QoRlaldMD4CA-zDTj8PW~6ZFWSE6bT7fqFR00-s~Sn4hXXZ7490Yh2SGca1Bwjxu4SYYA~cQZbm4oPL8wEWJ1xRn~6jjwFGZS-yyElnDawke8adap-G0o1-wlsKiwtgCUfRa7IRMP-NXb7Sn7SFXnpKtb1rbNo6ifrW-yYDZztc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1477460730&Signature=LA2zP08vS8-DdTYQ15sVVxzBrb~MXbxAzhuwNjBd4JFxISs7oD-M1HEIb-F5Ww77Dua-Zd8kxOjTVEGuMm6yvQW05SPAe-OCwZ7VMzpmQxfoueJPNARn37c2fdu10zfqv8mIwJKbSys3hPPrlxdm8pRbWCvDfRo6YytKddoFCn8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1453696990&Signature=ONSnHH7qwvnyQqLdZdSZlkGw8e90jrpx~tW1gSWCqp-62cLzWPG~T4aYQMfqg8GEbDDEEe8B1lD~iNmV~YvdzNPsc7LiK7Glq3gG0u4Sz9rQjZTGryq3HuzwwkOVJadmBlZYHfn0UeTLrXCJ6~p6qxMprMQ6XSgb1DDnCqz8F8Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1470378479&Signature=ceHU-O18m2eYqNz2bmVKOoJzdbx3PVSnULh0kaelG9bmSBniNnO0OcR1DzwCfBcEkNruMV32hr71685EaiYSH5bmPLBEz9PQE7hk4MDytNje33JW0TA65dbfrKvThZrPuJA2LaVDaJbmm1hgqdd~JQMcPDpgyDebF7e7KzRn9Bs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1455263461&Signature=GuhFP1671m72nSq2uQgZ~5KhCkx1DJlg2oHfuXTZAAR95ajZb1~gmqjaf5jQ9u6hYP9sqC-cdJRyiE4gmnt67MZx~j2fW9E~FjmGYXaWjMWQ3LM6i1IqtznV9ZsuqVsEruvVHbuisZOuT2TN2K8BFDGyrJX0KLZQW819CmwWrKs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1461739743&Signature=U-tkHnxX-zePYemoesF~sDuzXo41Zgkuw7SvCicrk-563ts5whRkg2fSFQyyFGqIfxnDOsibSt7zXpd~1mQkiAMHABCc~JrmTGMALpsSPqqnuy2R4jcmzRk3mBmLw-mzHdOvu-CZfp4w1Br4B~kRR2P-i13BcFl4n-In4EnALnY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1455332077&Signature=bPh2HwbnRBRbnFAkdezCzqKcOm4E2I48u56qMuqgvUhJWK4ZqXMrbr33yQP428uu2ksLlfQlJYUD5lB7exDDh~svYXnESX7o2DXmBjDR2GVkLCaEyQTGsRnJE40vtPVVbyxy863hutqxhH81XStVZqSMsBjdPSXaV~Gzxkn4yHc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1437941352&Signature=hRdQ4CKFITjLcy1gMSf88xAEVNW1Gu3mkj13HsqTh0jEW7XXxfMxs2w-e~t1W3TA1wEB6rnT~t8hjtS3S824cTOJFdI2WaqjvZ2gjyKUbWX~bdgy-DKtBu1iNu8B-dqx1Tcmg4Ryu8uQDWbCSLVDhSSXJ6RKzxHaUceOxVKw6tE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1465792937&Signature=LCGxdflxw0CQYSkcoBARfdNHj0D8Ho0U8W0QIqDq0tvtuiGAHZAik313a7BeptwJjgJZnkgUm6L-QPP4msDJ4suo75d88dtYICno8dnu0w-vJ6rR9Dg4Ni0qIdI~Wh-tinxIh2BKODGYF6ZaTDg2xQr-4i6QbaJ4zXwq530xir0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1454894136&Signature=Id6O86rzAM1QtrMviiPWyHfxNOMB5LxzsRDFtNlLMLk3-JcpeCKGHtW50Y1aRcIkUXrwnMXFSFq~Vyv0DrkdY9Oyhme~Wz0j8xfd5uWk9S1Wrxadza6ksTvwFV8xqoIu60nDU-sG5p03ZQDj6rqvxr2lvJasCg07Yau7-WR0zZg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_pl&type=PROGRAM&Expires=1453272274&Signature=PjAMy4xMSDziw4JvrCqlYraGaWSSc3d5friXyCuWvJSLleuT~DIirJNwq3cc4Tj-Hs62ztAcKP5kTBbevBaiYGFSWRDRSEn8zxTwcz-kEi9kntJqVaIvBzBABbdq2FpSJdNEAPILfr0-l09pB-edfoztNxVA9GmbBT4Ld0tuJr8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1454275415&Signature=CN6yo7r02~sTcudCoZHk1evwGvUSTXwMeGIrYCIeO1hG-XDZEbuGeZ4WHdcg9McQ0e5Yi0a6XQCsKp6jNF0t~U2Lce6LhjalH9UYcR8WAIjtF2iOp9Iwf5BSI0nSea3zIeyNk5dBZ5lvp56d4SB3cl-e575Mlj-s3F8W0ebMGtI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_es&type=PROGRAM&Expires=1453718852&Signature=eVXkGCEF4xqpa8Li-J~MGDSSmSYdB724GoBxeCnBbgB2TJIe7AyJLcE22VCw6i88PvmJuQQ~ckOpi30XGW5GqbEXgnWx~WA~wuHnDUfAhZEl5vBn9xM~QSb0UW7AxeDELmwrh4h5ELemCR1uR2PFKFq2Shd2MPx-BhctJFy4kmg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1452722286&Signature=Q8VeGtGLzCQIp57kJRdGZPXE74zoGmvNZI3PKVAYr4SVw5olsBMyLetBO800Yxd2Bb0y6dSMW9LPNNHWUru6G-hGC5f43F~Mq2lhQ5EMTgCr3EbdAOx-En9gdVqIBuu1Zy1pCUo-b8ubDMnnBeW7vtYREop96jZXto2JWlNV8HU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1430236444&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HXIVbEOWzReSGaYKMNQLlmHNvYPbEmfzsXK6~VmMRSXK0KZbYx8XRcRyxaTG-fEsmkjbMbRUl9s1xPhSY~ggFp9Py6EXeafoesauHKQGMnnZr~7yL~vO6B3oUUiz94yv1biAVSEWDcHmfczv5Xt24TrToiQXP0VpHVPC184d~Fc_&filename=Install_Supercow.EXE

http://gsf-cf.softonic.com/fa0/75f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66443&instance=softonic_en&type=PROGRAM&Expires=1438738392&Signature=Wz9tFflqNv6WkHUHEAdyW1PZzrda3sqW7cDifDLuUl0ih8Oc~eRP29OCfQNq9ozVCExPxHsq0yyzsmneatqxh966BTzNo~cz4uzbgd~WaLlGxQV-zlePVfRE8SCkxFzrxweI0QkKHZdhq-q3LoeqVLjDkDJGzjwM3m3P213SaJw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_Supercow.EXE

Scan install_supercow.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.