home

setup_moorhuhn-x-xs_v11.exe

Moorhuhn X - XS

Phenomedia AG

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Phenomedia AG

Product:
Moorhuhn X - XS

Version:
1.01.000.DE

MD5:
d45592a273410e9f7c0627a0e27a709b

SHA-1:
fe39723546d6fe4bbbad30de15f4ddc7c855479c

SHA-256:
ee2f895d302bb8bd77ffdcf5f6b9f553b4c7bacb48ecef3794bfdc29dc84ea0f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 6:54:08 PM UTC  (today)

File size:
5.6 MB (5,901,965 bytes)

Product version:
1.01.000.DE

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
9/5/2001 7:02:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:5fW+TeZpEL5hxq3XTHpw+7ZVd3Mq+MXzqwIJy81ePIu/sStlGdnT+oUqnJAA/N0e:Y+TeIhyTnM89Ib1ePIso7DV09zgZ4W5

Entry address:
0x8947

Entry point:
55, 8B, EC, 6A, FF, 68, 18, 33, 41, 00, 68, 80, BA, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, 31, 41, 00, 33, D2, 8A, D4, 89, 15, 5C, 63, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 58, 63, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 54, 63, 41, 00, C1, E8, 10, A3, 50, 63, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 2F, 00, 00, FF, 15, EC, 31, 41, 00, A3, 24, 8A, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
72 KB (73,728 bytes)

The file setup_moorhuhn-x-xs_v11.exe has been seen being distributed by the following 9 URLs.

http://gsf-cf.softonic.com/fe3/972/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35796&instance=softonic_de&type=PROGRAM&Expires=1449133399&Signature=C~n2uPpi8CBODzJCF3FKEII7BKPUzGDJzm5LP3lOHvH2J-QwPuLak6lhTYUypBxGX865IVrF5icpEqocqnmNdi4yw4Af3ww9m0FADhLXEe6WlYSTkI7GqZNrZqS9m2eO1Nz~fYRiPLBxcygwE~TTDePYHRIhPHb9y4-PtbFv-uU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup_Moorhuhn-X-XS_V11.exe

http://digishop.einfach-spielen.info/.../Setup_MoorhuhnX_Demo.exe

http://gsf-cf.softonic.com/fe3/972/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35796&instance=softonic_de&type=PROGRAM&Expires=1477643113&Signature=PDXrJc5fNsTQRDR9KjtieHNTfbNH7~Ntlwh-cAqQ5pwJZcVD8KaONjfAw56uNMnEARaDYhP81n6J-u5HmYDaouqd8f8Ik5b2q2bO911NO1riyGQEJ5aGpiR8a02CfEmPm0Wzc3g-ctaZ1ZSL0AjtAzCr7twf7uLTpXadjHizhk4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup_Moorhuhn-X-XS_V11.exe

http://gsf-cf.softonic.com/fe3/972/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35796&instance=softonic_de&type=PROGRAM&Expires=1476081553&Signature=U2l2imD4NPaQwySfesIdEfHkyRnVm786O9hcI9EKE-ClKPaGP~5l5bwHNmZs6geWW~BlBUpOZBFNoYNDDTXy5qMWzGrW80IWIGjxUF5gMZOmOyETZ9uUysGtbaVG7APis-4kLVd~U9c4327HiIriYAXro-JNVOxUDYDkbSqpTos_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup_Moorhuhn-X-XS_V11.exe

http://redirect.phenomedia.com/redirectMe.php?id=922

http://files.instaluj.cz/dwl/39ca5b82a651981af2c67738561da4a3/hry/akcni/.../moorhuhnx.exe

http://gsf-cf.softonic.com/fe3/972/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35796&instance=softonic_de&type=PROGRAM&Expires=1465356744&Signature=DgSpFvIwD5Q2ufYXTTX2KbNDhht~Ql~6M0TMSPJmq1dC35A97bepnuWj8cXdNMZM-PwRtjED2IH6Pq8TwXGS7RlnAS-44EeEII6QRmnPslXmsYqF7chKC7RkYLmgAP504BYB3rGomJO-qh12FG1ECC0EvYmROs~tspHJ7M0wxMQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup_Moorhuhn-X-XS_V11.exe

http://gsf-cf.softonic.com/fe3/972/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35796&instance=softonic_de&type=PROGRAM&Expires=1451892366&Signature=RUVspI7CPREEFE0jpa4vqaa6jEz-kzQ4q0~FAcBUoVlHCBz-s9JMHvbHb2C74wGeBGJMtBhB7xlKD4o2RUpNe~lGQv2t3CipAHtv92i4lqE33JHdNeIB28cc26a1HINgt2A2wm87jDR5tX3IY8Pf6iXcIseFLWa2v5aFR0lgny8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup_Moorhuhn-X-XS_V11.exe

http://mujsoubor.cz/download/akcni-hry/moorhuhn-x/s367eafjiij6s1sn967dqu6iq1/.../moorhuhn-x_X.exe

Scan setup_moorhuhn-x-xs_v11.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.