home

kehrmaschinensimulator2011_demo.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from kehrmaschinen-simulator-2011.softonic.pl and multiple other hosts.
MD5:
1b795767651fc7c0cc08e960ae6fcd27

SHA-1:
bc8208968fca15d0fe61196a86849b2cb040d0d0

SHA-256:
3c34e11579f444134322385305e39b1c5c45f7ae83246f15be5053654a91c4fe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:17:19 AM UTC  (today)

File size:
621.2 MB (651,354,788 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\kehrmaschinensimulator2011_demo.exe

File PE Metadata
Compilation timestamp:
8/16/2009 1:05:35 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12582912:xc5G9H+AjQuW+Vx1qLjXhNh2Tlds+iVje0CoXwQO/gm/pb3:689H+wQuvVxkjXATE+iVcg9G3

Entry address:
0xA7D8

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, 54, 2B, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, E2, A7, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, C1, AC, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 30, 22, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 34, 22, 41, 00, 8D, 45, E4...
 
[+]

Code size:
66 KB (67,584 bytes)

The file kehrmaschinensimulator2011_demo.exe has been seen being distributed by the following 6 URLs.

https://kehrmaschinen-simulator-2011.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAODQd71xP0p4vrTpGixx39NezwVSuJvwRd9GtlXFxxvOhiMyriRVwsPh/AJepZ4XDiJK6aUvIA3BDadqftd5R1VAgpO8bTtuvnhoXIBpF691/gJncHmGwntIhsLEcQN/GSvpngvhi P3oA3bo2VR7EAJsYkhWNMu425HisrP fGCRcIP7QX2uQDf7X5ovM9yH2OcHLle6PPct4mVxlcrxnEMQU7dgTBhchWMa8Z82rNox//WWvPlLzcfC4ftW9q7Yo81R76FrO15 musYRxlfT6CXGgD3N1XzsKjq2vWgrNWfD yYwqkwoUq4YrNgIOJuFvyvZkqtbzrIbdXyo6e 3LoXVkJpLD9q0xlXgpFdlKAX49P3T4wv9cpDkcO3OPc2ryjjmXB7XNVT6Wwb8eooTdb7ynmnWT3KA9KtwdEd r5j52AdKicWUTu5Fet25eh7Zc413VN2bxlylJ/qkMPLr7Y/.../iDRj2aWZtXmu4GnkUu3xLWY4yA654q8X71TnVGwMn9uANqOJ2DilJqZtb1WdcvRRrmovDzR0LxM=

https://kehrmaschinen-simulator-2011.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAODQd71xP0p4vrTpGixx39NezwVSuJvwRd9GtlXFxxvOhiMyriRVwsPh/AJepZ4XDiJK6aUvIA3BDadqftd5R1VAgpO8bTtuvnhoXIBpF691/gJncHmGwntIhsLEcQN/GSvpngvhi P3oA3bo2VR7EAJsYkhWNMu425HisrP fGCRcIP7QX2uQDf7X5ovM9yH2OcHLle6PPct4mVxlcrxnEMQU7dgTBhchWMa8Z82rNox//WWvPlLzcfC4ftW9q7YoQSPcx1xHg oFuCnd3IUGcMAi5HI2EBViT2/cpK2hkxxOgM3F5sFRuKP22H1/asLdaZFJfy/SJsAW7uJGAndYZ/iwM9OO2fyOXk358GPXfCdErSk3G0g32 mZB2x53uJ6G779c75PpqxI1zYzMyfzjuhVwSHZ2eWXthdmHFoNOHV9MqW184QEvKs xbCLofmHzGD/.../iDRj2aWZtXmu4GnkUu3xLWY4yA654q8X71TnVGwMn9uANqOJ2DilJqZtb1WdcvRRrmovDzR0LxM=

http://www262.megaupload.com/files/.../Demo_KehrmaschinenSimulator2011_de.exe

http://kehrmaschinen-simulator-2011.de.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAODQd71xP0p4vrTpGixx39NezwVSuJvwRd9GtlXFxxvOhiMyriRVwsPh/AJepZ4XDiJK6aUvIA3BDadqftd5R1VAgpO8bTtuvnhoXIBpF691/gJncHmGwntIhsLEcQN/GSvpngvhi P3oA3bo2VR7EAJsYkhWNMu425HisrP fGCRcIP7QX2uQDf7X5ovM9yH2OcHLle6PPct4mVxlcrxnEB4ldHaL3hyZRLFtZfElSPT63oPOzATCdwpFqabJmFA6i9IaZLTZTTersgeYUWKbGi5alZayXf0xZq03UdhFNP7sSNcQkGb5JK/ 9tNJcBaWsv7za V1n98Pvz1gAwI8SNE62cE6CWc1Zkj/newGVZ4hjF2WOiIMd09qb/PLXgbVfs/LWOh9IjqXps5i14ErD95bldgZJu2znUBJgCUCO/H1l1XdenfcokXX3rasHNsrGwrnM/RYa23/Uc0pDfDFNUZma/.../iDRj2aWZtXmu4GnkUu3xLWY4yA654q8X71TnVGwMn9uANqOJ2DilJqZtb1WdcvRRrmovDzR0LxM=

http://gsf-cf.softonic.com/bc8/208/.../file?SD_used=0&channel=WEB&fdh=no&id_file=318422&instance=softonic_pl&type=PROGRAM&Expires=1455094593&Signature=cmAM7mZ1L8sP-hXgabeqzE4f88mFJ8aWcS3QxKla8zmH5gAoOSEtTuOaxqfOfI3XLOKiQOgw9lnThcj8zMiGzB9Q2Vo5Ymsv836FUiSBlzx6Q4qk7sfZP4jHV6E9HZ9yMm0MT-q3Kg13rB5M8uAkU9BZrhvtp3lrKBofJ4I4IKY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=KehrmaschinenSimulator2011_Demo_de.exe

http://kehrmaschinen-simulator-2011.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAODQd71xP0p4vrTpGixx39NezwVSuJvwRd9GtlXFxxvOhiMyriRVwsPh/AJepZ4XDiJK6aUvIA3BDadqftd5R1VAgpO8bTtuvnhoXIBpF691/gJncHmGwntIhsLEcQN/GSvpngvhi P3oA3bo2VR7EAJsYkhWNMu425HisrP fGCRcIP7QX2uQDf7X5ovM9yH2OcHLle6PPct4mVxlcrxnEMQU7dgTBhchWMa8Z82rNox//WWvPlLzcfC4ftW9q7YqeQFXxPOJvxBtSnDmEkdk5HzVUnal7aKZJIOef8zZc90rocE64LRKUDrDYGqqOo9PbzH6ObeT3VkZ/bTIfAjy5gkBpDCZcCCR4veuoPvYKdu0pnX6Qpaxh2/F9FX6ZR/o4Hk6OUv5fzAC7lryURkVp6sNITKiku9Wfns5E4HqiVHfrvT9JIqC8ZfC03xv45R6A7Axb dGcSuL9i9c4xkvU1EWXe5j zJAnbHLeFsvTZIaqeXmxtIK4/.../iDRj2aWZtXmu4GnkUu3xLWY4yA654q8X71TnVGwMn9uANqOJ2DilJqZtb1WdcvRRrmovDzR0LxM=

Scan kehrmaschinensimulator2011_demo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.