home

Simulateur.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from ead-iut.univ-st-etienne.fr and multiple other hosts.
Version:
1.0.1955.11686

MD5:
c484f51ed6ef196563bae77bf6b709bb

SHA-1:
699a29db9fac5531c7961b8e636365a26f31b82c

SHA-256:
cdc5c444ce54680a421d8fa145ede0925f7ffbd72c6efd320bf3802e95e280cc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 2:38:22 PM UTC  (today)

File size:
1.3 MB (1,343,488 bytes)

Product version:
1.0.1955.11686

Original file name:
Simulateur.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\simulateur.exe

File PE Metadata
Compilation timestamp:
5/9/2005 7:29:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:frXLY1SoYsdA68/qXKulEMAz1Ksuyg9/4FADiuoKv/GZJ:Vm/NVoK2

Entry address:
0x146FBE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 03, 00, 03, 00, 00, 00, 28, 00, 00, 80, 0E, 00, 00, 00, 48, 00, 00, 80, 10, 00, 00, 00, 60, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 02, 00, 00, 00, 78, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.3 MB (1,331,200 bytes)

The file Simulateur.exe has been seen being distributed by the following 2 URLs.

https://ead-iut.univ-st-etienne.fr/claroline/.../download.php?url=L1RQX3NpbXVsYXRldXIvU2ltdWxhdGV1ci5leGU=&cidReset=true&cidReq=RES3

http://cvtic-2013.unilim.fr/pluginfile.php/20705/mod_forum/attachment/.../Simulateur.exe

Scan Simulateur.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.