Lego Batman Poza Gotham - Skidrow.exe

Lego Batman Poza Gotham

This is a setup program which is used to install the application. The file has been seen being downloaded from gry-skidrow.pl.
Product:
Lego Batman Poza Gotham

Version:
1.0.0.0

MD5:
9800153cd8d66d3e7fb4d973beabbb4d

SHA-1:
ccf75e775d2bba52dc4ddb361be7d9353ed496aa

SHA-256:
269da61836208cabf0fbd3c6af481624b26dfd3bcc6bb2e1bb6f2a2c9a915a38

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/15/2024 12:38:03 PM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Trojan.MSIL.Surveyer
4.0.3.151119

ESET NOD32
MSIL/Surveyer.CU (variant)
9.12581

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1077

File size:
17.6 MB (18,507,264 bytes)

Product version:
1.0.0.0

Original file name:
Lego Batman Poza Gotham - Skidrow.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\lego batman poza gotham - skidrow.exe

File PE Metadata
Compilation timestamp:
8/4/2015 1:18:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
393216:NKKuaqPuapxb2nseCJz/ghhtCiVtLsiw1s5cWSK+bs:1qPlR2ni0hhtCiV6mLB

Entry address:
0x11560CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
17.3 MB (18,170,368 bytes)

The file Lego Batman Poza Gotham - Skidrow.exe has been seen being distributed by the following URL.

Scan Lego Batman Poza Gotham - Skidrow.exe - Powered by Reason Core Security