home

train simulator 2015 [full version] [pc-gaming.pl].exe

WindowsApplication1

This is a setup program which is used to install the application. The file has been seen being downloaded from a23.catshare.net and multiple other hosts.
Product:
WindowsApplication1

Version:
1.0.0.0

MD5:
57f38abb1a724bd43160cd575dd54bd9

SHA-1:
1f4001bbcb6e6e68a5a3d56080bb61ff340dcac9

SHA-256:
821e4e5f92e4e470132c42049b56fe6a3fe145a7c77559a85235b93940c89a17

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:30:15 PM UTC  (today)

File size:
23.9 MB (25,070,080 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
Thief- Spolszczenie.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\train simulator 2015 [full version] [pc-gaming.pl].exe

File PE Metadata
Compilation timestamp:
1/14/2015 8:02:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
393216:BSBmSL3CsRtfG3fG3fG3fGkmtdrccmtdrcU999Npzpie/cS:B7ACQ666dKFKt999N

Entry address:
0x17C75CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 5B, BD, B6, 54, 00, 00, 00, 00, 02, 00, 00, 00, B9, 00, 00, 00, 1C, 80, 7C, 01, 1C, 5A, 7C, 01, 52, 53, 44, 53, 6D, D4, D6, F9, ED, 11, 7B, 43, B7, 52, 11, D3, FA, E9, D6, 97, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 4A, 61, 5C, 44, 6F, 63, 75, 6D, 65, 6E, 74, 73, 5C, 56, 69, 73, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
23.8 MB (24,925,696 bytes)

The file train simulator 2015 [full version] [pc-gaming.pl].exe has been seen being distributed by the following 3 URLs.

http://a23.catshare.net/dl/188157463/1582206795/2/.../Train Simulator 2015 [FULL VERSION] [pc-gaming.pl].exe

http://s7360.chomikuj.pl/File.aspx?e=27XJf4OQ_JD7h3vkSar5AfCCNA4svuuEu1N4boczpLHYJ07Qmw7nNuxzASeCkth_mAfIAQ2XuJKkvrDavNySmNa68WY5VzK-_73qULcldw8KBEbFB1EKrFDCIVCB9_S_xCFHJaWoYrYILHvRFuYiqMJl-zodqwvsDfctV9Fxdj9vyTJY2ADd8VGTJ1WKCVFQJFWawIQqHgA88p7QvYr8Iw&pv=2

http://s7360.chomikuj.pl/File.aspx?e=27XJf4OQ_JD7h3vkSar5AfCCNA4svuuEu1N4boczpLGjtFdSsNNcg7Suc1Ss7mANm8T9zMBgTbk5-dqAWpaQZauM2eOx0GB2ziV5wNvjvt4RajSGz25cDtzBllArRWK1tUlc6FZkXG1D_11tgHYk4qF4nCozceLycUrOvDk-B_RxeOtQFTxd_0UC6DpDqWaURi2YipTsGZpPKYKDgGeH6g&pv=2

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.