home

faberge-downloader.exe

launcher

1С-SoftClub LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from go.1c-softclub.ru.
Publisher:
1C-SoftClub  (signed by 1С-SoftClub LLC)

Product:
launcher

Description:
Game launcher

Version:
2.1.0.0

MD5:
9cc9b24205ceb3075984bcb0757ebcaf

SHA-1:
8fe9a527dded854a4913e9e09b7be57d7c26881b

SHA-256:
3010a53a7c1c7510696011b988e010e9ee3be69facb5ec1a85a1315b65614d27

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 5:49:40 AM UTC  (today)

File size:
3.3 MB (3,501,024 bytes)

Product version:
2.1.0.0

Copyright:
Copyright (C) 1C-Softclub, 2010

Original file name:
launcher

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
1С-SoftClub LLC

Authority:
COMODO CA Limited

Valid from:
7/8/2011 3:00:00 AM

Valid to:
7/8/2014 2:59:59 AM

Subject:
CN=1С-SoftClub LLC, O=1С-SoftClub LLC, STREET="1st Khvostov per., 11A, of.210A", L=Moscow, S=Moscow, PostalCode=119180, C=RU

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009E915C29365FDF0465B5BA6C4B6E19A5

File PE Metadata
Compilation timestamp:
8/6/2012 12:35:34 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x146AFC

Entry point:
E8, 01, 83, 00, 00, E9, 89, FE, FF, FF, B8, 47, F9, 54, 00, A3, 20, 35, 5E, 00, C7, 05, 24, 35, 5E, 00, 3D, F0, 54, 00, C7, 05, 28, 35, 5E, 00, F1, EF, 54, 00, C7, 05, 2C, 35, 5E, 00, 2A, F0, 54, 00, C7, 05, 30, 35, 5E, 00, 93, EF, 54, 00, A3, 34, 35, 5E, 00, C7, 05, 38, 35, 5E, 00, BF, F8, 54, 00, C7, 05, 3C, 35, 5E, 00, AF, EF, 54, 00, C7, 05, 40, 35, 5E, 00, 11, EF, 54, 00, C7, 05, 44, 35, 5E, 00, 9D, EE, 54, 00, C3, 8B, FF, 55, 8B, EC, E8, 96, FF, FF, FF, 83, 7D, 08, 00, 74, 05, E8, 12, 8E, 00, 00, DB...
 
[+]

Code size:
1.4 MB (1,506,304 bytes)

The file faberge-downloader.exe has been seen being distributed by the following URL.

http://go.1c-softclub.ru:8080/distr_smart/.../1838e39d3e62255aa47d27692db37d874c

Scan faberge-downloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.