home

construction simulator 2015 - gold edition v1.3 (4 dlc)(2-click run).exe

Friends in War Copy Maker

Friends in War

The program is a setup application that uses the Setup Factory installer. The file has been seen being downloaded from s7232.chomikuj.pl and multiple other hosts.
Publisher:
Friends in War

Product:
Friends in War Copy Maker

Description:
Copy Maker

Version:
1.0.0.0

MD5:
864e0a06e0c7f4607c476f640e7e119f

SHA-1:
bd76a1f2ab7cd1aced231ae0c14c30fbb2dab675

SHA-256:
082c84d12eaa0bd92b9738c0ef684272123babafa5b1779eff24388d531de100

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 9:44:26 PM UTC  (today)

File size:
770.7 MB (808,114,310 bytes)

Product version:
1.0.0.0

Copyright:
Friends in War Copyright © 2012 - 2013 Friends in War

Trademarks:
Copy Maker is a trademark of Friends in War

Original file name:
suf_launch.exe

File type:
Executable application (Win32 EXE)

Installer:
Setup Factory

Language:
English (United States)

File PE Metadata
Compilation timestamp:
2/9/2015 10:57:00 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
25165824:JE7AWhNTkz17LI6I6X8ZRG7r164JaJQgt:CAWyhi6X8yf16ZJQi

Entry address:
0x29E1

Entry point:
E8, A6, 1D, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 56, 57, 33, F6, BF, C8, AB, 40, 00, 83, 3C, F5, 54, A0, 40, 00, 01, 75, 1D, 8D, 04, F5, 50, A0, 40, 00, 89, 38, 68, A0, 0F, 00, 00, FF, 30, 83, C7, 18, FF, 15, C0, 70, 40, 00, 85, C0, 74, 0C, 46, 83, FE, 24, 7C, D3, 33, C0, 40, 5F, 5E, C3, 83, 24, F5, 50, A0, 40, 00, 00, 33, C0, EB, F1, 8B, FF, 53, 8B, 1D, C4, 70, 40, 00, 56, BE, 50, A0, 40, 00, 57, 8B, 3E, 85, FF, 74, 13, 83, 7E, 04, 01, 74, 0D, 57, FF, D3, 57, E8, 18, FD, FF, FF, 83, 26, 00, 59, 83, C6, 08...
 
[+]

Entropy:
8.0000  (probably packed)

Code size:
22 KB (22,528 bytes)

The file construction simulator 2015 - gold edition v1.3 (4 dlc)(2-click run).exe has been seen being distributed by the following 5 URLs.

http://s7232.chomikuj.pl/File.aspx?e=qyzJeVoSgbsKl4RjUHBChlvTUcorD_RHujgA8g49rCQRKu6A06XMZi-_9sCzaXlZaEueQdPdQwg6m_FBaSSCndHend1Th0LwRcZx__LA4ib6U_fSiU8NSdxZKQcOSf1HnfUWUnz4bXPkZva5dc0Q0FonI_V7UK1iKaWmOI7RtUfomfnD6aRP5fQmjZrXbUjw3-wej1LoRFFneGWiz8oAWlEIM1PWGLGb6xgiWmnMHC8&pv=2

http://s7232.chomikuj.pl/File.aspx?e=qyzJeVoSgbsKl4RjUHBChlvTUcorD_RHujgA8g49rCRQvqxecY5iFO9LQAcJyIhjXyh2R5QjRlxPudYclPmC6ergLSxEwj4sZSymR9ff1mdITnQSopfhO8m4w9YHaoLfq6zFPKpghPziNn_rKxrJEpfU-M-EZg_OSkntzXQItXVikCfgtmUKdsWgAkSKfOz2D8anNyxgA42O40IgXhq56i_pliBeOmCMTyxOnlQ1e6Q&pv=2

http://s7232.chomikuj.pl/File.aspx?e=qyzJeVoSgbsKl4RjUHBChlvTUcorD_RHujgA8g49rCRNezvk6JBW3THmcba6AUCigzdV2K3mmQGXcHhDGuiCYnwT2LpuX2TArcHtXrFM43EUMKmp1ZY0jeF98irLzhruEQZUuchnwICi7B8qrUo99ufHDgGUkiqOyY0FsaR8aOyIG32cbODTuB_bAl54R9pnvf4gekLULzrigfpHbIK8tIzKrU3YUxsu4wjH2k7vj84&pv=2

http://s7232.chomikuj.pl/File.aspx?e=qyzJeVoSgbsKl4RjUHBChmeUnYWl6Dy16GsKI_W36V2QFQ1wf3c2oS5t1XF5bmJFFQCQA7bALceecL4ui98UBwK-qfL0nmi7xunV8nOchxgh0MwlpoUnov94K8wp00QEjFlSJcRk1VSMAGfkVdhWZsVgo9ML_rbnYWuEPGBWOOLNPw1xGKwkXRxEx2wt-VRbsnXsLj26UGpI0E1EZBcCZDqHscCc7h_myQvIuCRN6zM&pv=2

http://s7232.chomikuj.pl/File.aspx?e=qyzJeVoSgbsKl4RjUHBChlvTUcorD_RHujgA8g49rCR3jKQ4vQhq0rttjhu8B0o5Rv9r6Sbg7lYTSeViNKylI2kEsdSKN5M5X24bwaeMtCMO-5k58F_GyDA98LuWcIR-94MDvSfad8MNCUssIbzv0j82S7VEpQsKYUX6x_OT0belzm-eGMp4GtVMXizGoi60xrJE_8GcIO4WbYFkDsDpbwhdwtNM5QsfohslbiiF0Lw&pv=2

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.