home

simulator.exe

MD5:
7e093bbbb684b9b7facf3ead61aaf355

SHA-1:
8c9c76af8935492375983a70fa1e678460d616d2

SHA-256:
77635cd576c841798ac690a2baf9674d9b267b4c583a06fcbdf91c40faf7b26b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 3:39:58 PM UTC  (today)

File size:
5 MB (5,254,656 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\phoenixrc\simulator.exe

File PE Metadata
Compilation timestamp:
1/27/2014 6:22:23 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:3Y0QGOeZpFufcrDMEluu4sM5vN7EcvhL5X+uYgmEB6UzNwEcWQVF1FCIjM3EkPl+:3lOEFufcUEluu4sM5vN7Ecvhl9mEB7zZ

Entry address:
0x3B9E3C

Entry point:
E8, AC, 2F, 01, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 83, 65, E0, 00, 57, 6A, 07, 33, C0, 59, 8D, 7D, E4, F3, AB, 39, 45, 10, 75, 15, E8, DD, 2D, 00, 00, C7, 00, 16, 00, 00, 00, E8, 01, 95, 00, 00, 83, C8, FF, EB, 78, 8B, 4D, 0C, 56, 8B, 75, 08, 85, C9, 74, 19, 85, F6, 75, 15, E8, B9, 2D, 00, 00, C7, 00, 16, 00, 00, 00, E8, DD, 94, 00, 00, 83, C8, FF, EB, 53, B8, FF, FF, FF, 7F, 89, 45, E4, 3B, C8, 77, 03, 89, 4D, E4, FF, 75, 18, 8D, 45, E0, FF, 75, 14, C7, 45, EC, 42, 00, 00, 00, FF, 75...
 
[+]

Entropy:
6.6488

Code size:
4 MB (4,235,264 bytes)

The file simulator.exe has been seen being distributed by the following 2 URLs.

https://doc-14-ac-docs.googleusercontent.com/docs/securesc/u6ud18j7nt7g9o590lg8hskutev4qaca/5jruokt3j3v1pf09o4rmojfgreq006mr/1482026400000/08473220900886108539/.../0B9gqb_LFuqffRzFTcW8zdTJlTlE?e=download

https://doc-14-5k-docs.googleusercontent.com/docs/securesc/qrlkgeipvfmlohm64doho30k0j14vg13/te3sunlm3qku53o057so02gb2o2250pa/1462464000000/08473220900886108539/.../0B9gqb_LFuqffRzFTcW8zdTJlTlE?e=download

Scan simulator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.