home

simjp.exe

This is installed with multiple programs including Genesis Expansion Project and Genesis Expansion Project v2. The file has been seen being downloaded from online.b1.org and multiple other hosts.
MD5:
abe012743af512aff72781b08b5853ff

SHA-1:
4b3d0902e69e6da8c4d510c9dba840a987df2c17

SHA-256:
8343acf132795b58eee21949268f135a9aab900b1d05cb394767c43c08f00003

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:48:04 AM UTC  (today)

File size:
5.5 MB (5,775,360 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\universal interactive\blue tongue software\jurassic park operation genesis\jpog\simjp.exe

File PE Metadata
Compilation timestamp:
9/9/2012 10:15:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:w8ZFnD8ByMl0bfmtuL9uks+HvVE7Wx+xpGzkpFS1:ZLD8ByMIug9uks+HvVE7Wx+xpG4F

Entry address:
0x331118

Entry point:
55, 8B, EC, 6A, FF, 68, 78, 17, 74, 00, 68, FE, 12, 73, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 20, 53, 56, 57, 89, 65, E8, 83, 65, FC, 00, 6A, 01, FF, 15, F4, 90, 73, 00, 59, 83, 0D, 54, 5F, CE, 00, FF, 83, 0D, 58, 5F, CE, 00, FF, FF, 15, F8, 90, 73, 00, 8B, 0D, 24, E0, 8A, 00, 89, 08, FF, 15, FC, 90, 73, 00, 8B, 0D, 20, E0, 8A, 00, 89, 08, A1, 04, 91, 73, 00, 8B, 00, A3, 50, 5F, CE, 00, E8, 01, 02, 00, 00, 83, 3D, A0, AE, 84, 00, 00, 75, 0C, 68, 84, 13, 73, 00, FF, 15, 08, 91...
 
[+]

Entropy:
6.1044

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
3 MB (3,178,496 bytes)

The file simjp.exe has been discovered within the following programs.

Genesis Expansion Project
About 2% of users remove it
Genesis Expansion Project v2
About 3% of users remove it
 
Powered by Should I Remove It?

The file simjp.exe has been seen being distributed by the following 3 URLs.

http://online.b1.org/rest/online/download/.../simjp.eXe

about:internet

http://s10250.chomikuj.pl/File.aspx?e=R4kB-rH5r9ptfcSQucHBbu7s9Xc7nc0KIMtEF2sJxCW2SEQUjiEPryJ31nTvcEurCRDtK5fdfs4Ro01KOEG1OkAiVe1dzze9iEOFK95zXseV85NpmrFzvE9bn1aP6TO7&pv=2

Scan simjp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.