home

gamesplayerinstall.exe

RealGames Europe B.V.

This is a self-extracting archive and installer. The file has been seen being downloaded from cdn.media.zylom.com and multiple other hosts.
Publisher:
RealGames Europe B.V.  (signed and verified)

MD5:
9e91228033f926b276049d813b6dac5e

SHA-1:
91015c3fbe58c32e26041fb47733ef71b342b9c8

SHA-256:
fedf049fa44de8f5c23e1d65cb8eed2b617ddf4540d47050d66c7c18af124dbf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 4:44:36 PM UTC  (today)

File size:
498.8 KB (510,800 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\gamesplayerinstall.exe

Digital Signature
Signed by:
RealGames Europe B.V.

Authority:
VeriSign, Inc.

Valid from:
5/18/2009 5:00:00 PM

Valid to:
5/27/2012 4:59:59 PM

Subject:
CN=RealGames Europe B.V., OU=Zylom Games, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=RealGames Europe B.V., L=Eindhoven, S=Noord-Brabant, C=NL

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7DBAA6044AD76F847804FD36704F0C73

File PE Metadata
Compilation timestamp:
6/30/2009 4:09:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:wbXjq82xw1F5CPz3ppGiReAwNxUc97k9vZtqKiBAGX2Kv:wbXjq82xw1Fqz3ppGiURNuc97kR8BA34

Entry address:
0x2732C

Entry point:
6A, 60, 68, 20, 80, 43, 00, E8, F4, C4, FF, FF, BF, 94, 00, 00, 00, 8B, C7, E8, 4C, C6, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, F8, 51, 43, 00, 8B, 4E, 10, 89, 0D, C0, 3E, 44, 00, 8B, 46, 04, A3, CC, 3E, 44, 00, 8B, 56, 08, 89, 15, D0, 3E, 44, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, C4, 3E, 44, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, C4, 3E, 44, 00, C1, E0, 08, 03, C2, A3, C8, 3E, 44, 00, 33, F6, 56, 8B, 3D, CC, 50, 43, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
7.2859

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
208 KB (212,992 bytes)

The file gamesplayerinstall.exe has been discovered within the following programs.

Zylom Games Player Plugin  by Zylom Games
The downloadable versions of games are called Deluxe games. Anyone who registers (for free) can download free trials of the Deluxe games before purchasing. New games are released every week – one online game and two Deluxe games.
www.zylom.com
24% remove it
Zylom Games Player Pluginl  by Zylom Games
This is a casual video game for the PC distributed by Zylom, powered by GameHouse Europe. A free trail of the full version is available for a time limited download. The game download requires the Zylom Games Player to be installed which in some cases bundles additional software.
26% remove it
 
Powered by Should I Remove It?

The file gamesplayerinstall.exe has been seen being distributed by the following 4 URLs.

http://cdn.media.zylom.com/plugin/custom/1/1/.../gamesplayerinstall.exe

http://cdn.games.zylom.net/plugin/fallback/1/1/.../gamesplayerinstall.exe

http://cdn.media.zylom.com/plugin/fallback/1/1/.../gamesplayerinstall.exe

https://media.zylom.com/plugin/fallback/1/1/.../gamesplayerinstall.exe

Scan gamesplayerinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.