home

papers, please pl v1.2.exe

Papers, Please PL

GameSub

This is a setup program which is used to install the application. The file has been seen being downloaded from www.bytesendclear.com and multiple other hosts.
Publisher:
GameSub

Product:
Papers, Please PL

Description:
Polonizacja gry Papers, Please

Version:
1.2

MD5:
b04b85201acd92883a6eaab72fd57cb8

SHA-1:
cdf9f88d9d1329e6c02c4487aaa2cb260c597883

SHA-256:
5cafec5712567d4a830ed0b8e4f76955efeb4a54065888dcd670efe58d2ab10e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 9:48:43 AM UTC  (today)

File size:
283.5 KB (290,349 bytes)

Product version:
1.2

Copyright:
© GameSub

File type:
Executable application (Win32 EXE)

Language:
Polish (Poland)

File PE Metadata
Compilation timestamp:
7/14/2013 10:09:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:cVguQV3Koeg7GmIv0ZQSQ5jT7opv8sQp6VuBV5P1ZWJL:cVgp3fqMQ5jnoGPB/P1c

Entry address:
0x68710

Entry point:
60, BE, 00, 40, 46, 00, 8D, BE, 00, D0, F9, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
20 KB (20,480 bytes)

The file papers, please pl v1.2.exe has been seen being distributed by the following 8 URLs.

http://www.bytesendclear.com/8mMdch Vj U7TM_PKl8TIC7YJ6NtPvcANSX0nUnYk8zUjK_VPVGpj_fB5gu9IFbPIw59XzklZ60CqBfD0BFpefTyBGIK2RnC54Lgo87c1hcpLldGbw5BP0rm0O2QSXlFDo0BRz_wKy4hJJs95qbBqJ9h3sxiq2wVFua6MQ_41Sctazbrj_3nS0IUZCxuU4t91GYGZ5kukkgwJgVCfB wXuN2e3vd2UyZcKfJp0kxR1BniGI60fpIED3JN120KCprhuyOow1Dx035POu6zJVJyGiq7Xl yQwiEhgz5ewMhxa_oP87lzL74BMNfSQeltT5XTPzZpFbr02EZp AIDYj9ZW43RuJSLUnFMO6bGi_sSMAmTMol2cQBZPYd8OATOjHgFsSqDJ6YfIi2v3wLOrbqAZjBV3vCUkzl3YhycgOCI9QVXnCx8HoBzplBdRXbmKbOm RvFGRWHmisOgosqSpzh3e_OHQ22xtF4F94dOrkjE_pdUqpQXbZfZXYwCWEGKADZEByEyYgzV6m1cxyoxKbcb67sMz7tITLsLiu9nVfOv3tzN7PFXD3I9E4bS3GqA2Sf79kvsjJoZbgYiDloZ7_TsR0BqYuQFsOGOkBhAo797FfgvNj_o=-G2YAAGTYtrmAM60ch0xtcMiBw5e1LJJAPdgYA8Hxg043rTGNAuI MMWCWdCWRVk mByqytes8S_fYzHa3eUx_XnQuNK8oBknXo63gs49Bi6Ye8hfDg==-E

http://www.bytesendclear.com/7xX oGEq6wUodGgHtiuTxI2btlwbDLrh2_F6_OyXe9wox8gkKG04RSfOUJMLoYDYXHtCC ENDJQstQwbjDpqCaSK664_rncHx0BptLSmDqUDFE3RNk1IVIEtz4Si1HBB8qiDvilPBqtq5z_iWahK6QeCiR8JkcfPEiGHFk7J1I7b4eS15I44PTNKXD5_skf iRdAiTUhrrolHfdsWmn1DEj0czdx107vRijSfvZzPqabCXBpO1EjHTHPqiPCx_UyC0DZZzBjljpdFYduGQ5cyLkjwtdazzvDShBTjB5cNdclcgA2Eqiaq7JUXnJMuJIEAIFRpKAl6y4xdYEOc2DD7ip8cl9LaddHaBc9yB0hPYJAULCi8gBFLrYObEASasXlXmBM B__PoQot2hviNLLxRZqQnt7vNbQa kjOfbD6UU1jlImkh76dYuZkZa8Q9NZ58GD0ysgWZQcOdSX3NEpmjJEoUGVHZsZqqvM7FaN7X7co68ARPZlBGi8HJdQGqQ7WS_luWOiAUiGgjv JJkEsN6BCqy7TZRlcefGZoP18Q25Tw7fIvpQU7wm4JZeRmoi41O5X603pC7ABL_SKTLZGCCwHIj167QVfV5Aee_Vk29h8K85PfI=-G2YAAGTYtrmAM60ch0xtcMiBw5e1LJJAPdgYA8Hxg043rTGNAuI MMWCWdCWRVk mByqytes8S_fYzHa3eUx_XnQuNK8oBknXo63gs49Bi6Ye8hfDg==-E

http://www.bytesendclear.com/B1TjwKqX1gyzBgxFhdQfpJcKiVBLfg6_bXm8zELYiQaoDaw93KSCZZbfqWh95k1swePUBJsgONVDMswmxiv1c_wLQvlnqbY hhCwjRrpQPPGn5xE4NNGn_9E9 MAycpAJJEEUnfp_ux0 gHE0xWwiyrAoSt3MUMSfuWamdBGntIuONfPYPQtK79CdjXJrwOlp__zgKXTrtl8Gx5l26Kp3vB6t71rST CTTQhKCBV8XBWtig0d4bjHuazMzVl2etbUpM056BsQ9OV9hNYPglef2Bk2Q81MXeRf_xs2iUXqrqOqkSnZzPW3fm0 sAVCW98lreRe51N8wmpc_zbiTdzrdpb7IbNr78vqFXGSjPbVL 3sIj3HCBKnJ3z7h28K8LVNRMLLOoVOk4i60rTSgWE6CEQ HEAdU0awYHQF1YWxkzV4LWpOJ7QGU_NxK38p3s53ouf5 TrLDuP2KRua10J2BF7R GkRsBWWqHdgqHOlvjW fZ8BO0cy_aSbiUTiEXI9HiibpJkNj4blYEWxj IbCy1zZXKYgllLMy oinnfWsMtNxizDKsYBGwd4xVRrILgllzifv9W6P7x2ipqEF9fsMPzA1VAQ==-G2YAAGTYtrmAM60ch0xtcMiBw5e1LJJAPdgYA8Hxg043rTGNAuI MMWCWdCWRVk mByqytes8S_fYzHa3eUx_XnQuNK8oBknXo63gs49Bi6Ye8hfDg==

http://www.bytesendclear.com/zFqJk61LmaMZbtRgxCi7aLJhwuh3K_hHl_mOZWDPld6DICJwIt3I9qSP4ebbu7nDeKjoC7HECbqp4LITMAF1VtEHpBMWiEzg6vUikfLX3Yc9_X22s0gRGcWNi_izlOiJvz_dPBilR2by64yUISJe7gqAh3NWqAW6Y3NcMjw8jveS1DtPmLun8 DHoqobUPIRfLmdYpAh745cKnbTKl7QLq7gkqLRVgRWW2x6hlRlkT0OnTUGHfK_yHljsq5zRRXmQ1KFRRpbC78mKouqqYxnsMX1YlAu86HPfvL4lXTF_gDZXjqJFm5L Q12lgpc_T0Hu_ThI35frxJSoGxxomIKfGLzJ2HaG1ZOvvdXrkWU KGXhDfpEKjji TT31uAYp8_3oHB CiU29MpRu7uZ6axfaYXKh2ZQaCV_BtOIc_bq9wbNZKUQzdzca08zoGWT b20Xn7uEf9EP7S376RExOAbf505CBOavGElldgLKPsLZGBLLGUb9FQkT_1Tp9QvKgPj93mJXCdP30 rhHpV7Z2AAQunL6yAzBvvSq9k_bIqd28YGSqPp4NHquJlnyzwBw7wNNqvaAkAgtkDVpSTFYcTeMVSsY08RCbrjOhvQRm3Kjfx6QOjAg=-G2YAAGTYtrmAM60ch0xtcMiBw5e1LJJAPdgYA8Hxg043rTGNAuI MMWCWdCWRVk mByqytes8S_fYzHa3eUx_XnQuNK8oBknXo63gs49Bi6Ye8hfDg==-E

http://www.bytesendclear.com/lK1W6OEg C_yEWhN8RcHkToZIlf33IYagphEZdwk vh3SkYCCe_k0UuQ2K_wWpNeH5x5T9rJU 8EVDQ_ENb2Mw2x1PmvLZGTGc2N3VPHYExGbvcVc1fvgz8_IaDyHqZ19eCZY1gBtJCMLaYdCRjby9ZSQZLpDVI AsoNMyYqbXb1hMh0DS2ty3jICMm2iNsvHF_GNrMvYO sZ5T 4XJVJgCETblASCWMcs6UmuUf3JGbKStmwlNp_ZAZEiuNbsvXnO6DivEqLVEirChzfQKEZV5rKzppbcprnPLuuhE3nQbH0Ja2QsSmxH3lMSahy60O4BubCRAzg7coV7ElbYT_2w8Kvoe5mVtg7DN1RbCNwDTyDrMYBLPTVccgGeGAM1Dy6AuolBEof3We24jKv2DuGRMyLncX5TVc7WhAgvsu0EltNrLG_vYSqg0s0Xs7AqGZPLZVaMCSdeASuhA5Q3uzoLQY5HvKF6GQg6sUd1i4HpN29S2YKpjnI1_LNsuuYdox2R6vdz9CMdQN2XpvtOZ21cSS0nj49g1TY bqf3nV23hUCOBKHIPgWHdIXNySWx_k_srLUwtTA1 irb54TOJalbqQM9RnX9czpdSSN5yPwgqNMN5BT9Y=-G2YAAGTYtrmAM60ch0xtcMiBw5e1LJJAPdgYA8Hxg043rTGNAuI MMWCWdCWRVk mByqytes8S_fYzHa3eUx_XnQuNK8oBknXo63gs49Bi6Ye8hfDg==-E

http://www.bytesendclear.com/c?x=YuLewNfnGUzWdn3Nni0OrhFfn2GCswUEd0wVECIR 5k=&e=1&c=kOJUTQwJ51juzbrNurxvWN6bVquCciH BULS62V4fwa95qnAvENNxtmcZ37Wi8AyiVClz/RIexNda8eBWm8eqlsdHh8UA9NMJlYl1yw0kW9dRdWmxAbHTrRw1J0dYNiQyd9c2fAv AMD5ARDzslflWYz9FSbgb AaGKpo6evkGM=&fallback_url=http://files-download.poradnikdogry.pl/GryIRozrywka/TlumaczeniaGier/.../Papers-Please-PL.exe&downloadAs=Papers, Please 1.2 - spolszczenie.exe

http://www.bytesendclear.com/rXIF08P6QPLFcri7wQ1uHcGZAkfzm3C1QZbDGQyWtIlHrn4U6Q9LzepuX0UH6GeQUdAj1yhVxsAkEI3cvQuin0tgdAtyyXOQ2 zsK7e6JIJKaT3ncij 6NS4RuQT5iSTOwMX8urCP0R4BmeRh8AmLta07Rd6QMVRGvvrqhLfmd1VBudq1WSev8rWM0LPavRjjEU0CtXH9xIvA4gsfsGUZ4gpccKBpCdZK0Ob_F84cyl7rchBOwbmuJXcyhE2Xfoy3VYiCen4iLQtdL6aRaUrTY9LAB83UZgwggLmO3LA7S0P4RB5sTtYLGRdy uPovSKynTC4a8nXatkL1C46kz62vVqhMbR3x0Wr_6qDWpsQJhoyyZ9TTEk5aoIHbL8tVUGco6iazJ1rt2LGIqDzwzMGrZ6NlKt3WKGBMJZXPtAf0bo261A_b_hfNn415Hjosak1aY5paSom7_3AFYJsq7btF0nZNSZ2QECZ 4tDi4nyu_CXAgdnAw vEln6z771eTkKSITl5a4yIdnKkQHcveipBHKfn38hlBqPH6s9ZXE9o22SH9iaFBt6iJTrnzu9diuYZAwKhX49rHnPJmiMQYCSO6os nf0Rdx646Dg8aYaRpUfSKKG8U=-G2YAAGTYtrmAM60ch0xtcMiBw5e1LJJAPdgYA8Hxg043rTGNAuI MMWCWdCWRVk mByqytes8S_fYzHa3eUx_XnQuNK8oBknXo63gs49Bi6Ye8hfDg==-E

http://www.securedownload.me/download/down/.../36be5cadefd8c7c

Scan papers, please pl v1.2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.