home

scdemo.exe

Starcraft Installer

Blizzard Entertainment

This is a self-extracting archive and installer. The file has been seen being downloaded from 88.86.106.11 and multiple other hosts.
Publisher:
Blizzard Entertainment

Product:
Starcraft Installer

Version:
1, 0, 0, 4

MD5:
65f2d3a467099d7580255ef7ff6f31cc

SHA-1:
3126b9b0a390e046d96918e317fa64093ee29bbd

SHA-256:
c979399d8543917bb091266fbd12c1e1d8631647231163cf5ac931ef4de9cb83

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:12:45 PM UTC  (today)

File size:
28.2 MB (29,569,755 bytes)

Product version:
Version 1.04

Copyright:
Copyright © 1998

Original file name:
Install.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\scdemo.exe

File PE Metadata
Compilation timestamp:
6/22/1998 12:48:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
393216:MBryzJHExa1tqVFM280OQw6j8InYvLT2qK1cz1JH9te5oyrCO8s/ZRMOqcOUtcID:hFIaaPOQwDHNSy1VgFrcWMwOU/mXJs

Entry address:
0x23770

Entry point:
55, 8B, EC, 6A, FF, 68, 58, 41, 43, 00, 68, E0, 42, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A8, 53, 56, 57, 89, 65, E8, FF, 15, D8, 20, 43, 00, 33, D2, 8A, D4, 89, 15, D8, 54, 44, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, D4, 54, 44, 00, C1, E1, 08, 03, CA, 89, 0D, D0, 54, 44, 00, C1, E8, 10, A3, CC, 54, 44, 00, E8, A4, 64, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 79, 01, 00, 00, 83, C4, 04, E8, B1, 1F, 00, 00, 85, C0, 75, 0A, 6A, 10, E8, 66, 01, 00, 00, 83, C4, 04, C7, 45, FC...
 
[+]

Entropy:
7.9973

Developed / compiled with:
Microsoft Visual C++

Code size:
194.5 KB (199,168 bytes)

The file scdemo.exe has been seen being distributed by the following 6 URLs.

http://88.86.106.11/download/.../SCDemo.exe

http://cdn.programasgratisdownload.com/?ic_user_id=9258

http://ultradownloads.com.br/.../2,933911.html

http://dw.uptodown.com/dwn/54ofcyGHIN_D7V6dMDVOJ_wYMyh6NqK98cpSeLFIkVD8ZifyPjFa3zoVwdC3_0izJDO44SvC_cW0roGZsB8Ta1GaTB9T1hmZ6QoDRsCkD46cuAQ8k0f8cLjEai1_hd6J/l6m8JtEVCbSHMAdNu__seL8mrhF5bCqjaIOVBtBUONHrsEvuCpHDEWCdwFMcrbqebDQ6VeOxUDuD1083YjLYkZo0rJzb4jvjiY1zY2LNXvp3SautLf9L_mpob-Dqo4FS/.../

http://dw.uptodown.com/dwn/Oy2ThYnSi0y-XsW73pKFbvTwnXqE8dAiIhvIdg6AcrkUzP-7xt6w69Z7k8kZR1JpEqDm1zeWJ8k-LiNciXfZlpwJJ3OY2y9MTKIdByNklBLzHYT1Ni-XzhbIeKKUNzJ4/7pCwXjkg5Ao2aMyi4gRiJ3CKwErp14h1SAB8W1E9BsDGh5hJVtsqGEqhFON4Bm0hm7fhPyewk-9SosDD1nhkgfCaxN3H0y4NF1p7gT7J74oXXAYgzltpoAuJJjHD2D9-/.../

http://ftp.blizzard.com/pub/starcraft/.../SCDemo.exe

Scan scdemo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.