home

1916.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.indiedb.com and multiple other hosts.
MD5:
28418233a5eb911843bfcc7fb5a13682

SHA-1:
eec7e442d0d8d5e22dddd0c7aa36efc9a7d4b3fd

SHA-256:
1c591a1be040285db1c8047ead158f41fd657ece7e75dfb87a940f22e5636c3f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:05:12 PM UTC  (today)

File size:
59 MB (61,815,945 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
3/15/2010 7:27:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:XJRtpo5tswwTyzGxBR+33+WX0/U21xkQ+qXAgeyb:5J0szTyz73zMxkQ+qXAgeyb

Entry address:
0xA7B1

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, BE, 2B, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, D0, A7, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, AF, AC, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 40, 22, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 44, 22, 41, 00, 8D, 45, E4...
 
[+]

Entropy:
7.9978  (probably packed)

Code size:
66 KB (67,584 bytes)

The file 1916.exe has been discovered within the following program.

Christmas Shopper Simulator  by Game Retail Ltd.
www.game.co.uk/css
About 2% of users remove it
 
Powered by Should I Remove It?

The file 1916.exe has been seen being distributed by the following 15 URLs.

http://www.indiedb.com/downloads/mirror/32120/100/bea148800ef28b63b363128a9e5d312b/?referer=https://.../

http://lb.cdn.m6web.fr/d/c/a/fde7b5874f418055930ba798d06992f4/587a5249/soft/.../1916-der-unbekannte-krieg_fr_432391.exe

http://ultradownloads.com.br/.../2,1114815.html

http://www.kaboom.pl/files/download/1/2/.../1916-der-unbekannte-krieg_www-kaboom-pl.exe

http://www.indiedb.com/downloads/mirror/32120/.../f4f0f0e9a9f1b7028763e01cc0e6cc46

http://dw.uptodown.com/dwn/f7W9Kr7KeZV5_-3KpwbBdzn4uIy-YmD-DlfFUGbMA1RNIuwY_JZpMtOw0UbhZlpUDbR8OGqiz3C0C-yAcoGYSwl_OvhRMdnr-r23ngqSGZhzcqRab8OfOJxWJlgNqIfp/fPdV4FNjKk8kHl6K204Jyge7iXjgrTKrmbmZ9mkaR1tOU0x-tNe3m7BEsEnYYJoiPy5dWD1owPOfhNm7mc22xZ_6ZNiCrxu45bU_enwIKse5mqHg_oez9KSZbjNWy5eI/NkqWm3nNlBDmNDHFkT28SWKzxNzUyp5jJC9RvGBvR1H1vAQcZ1nHeIyyuD4wLeA61C8D7e2BG2TqANppVu89YxTAsL0jRpdW7iiA0zm71ZsrZLMxnA2E-D16LQLog-mU/.../

http://sjc3.dl.dbolical.com/2011/04/.../1916.exe

http://dw.uptodown.com/dwn/p3IRTW5qgJPJn2kEfNl3ikkAfAnUCilGsdr9MZhbI5ANwd3R2YRjykfcZt2PTXnZ0jChTsV7RYUlyW8-0OlFRXX8OlLr7Z7cdRdA02Y9OlwWOAw_XQZMIFs_BL7aftBd/cnhw-e0uzoK5YtA2QcCGQrc-4v6s2jcFPb-W7-E4RrSrsZdwS0wKI00aNDxEQrNanUe1w92Q8GMQPUm4sfIRYZLi6W3phtu-tc6bMbVJx8GhuViEc_rfxPlAtiwrjEkz/.../

http://www.indiedb.com/downloads/mirror/32120/.../3d5de9ccefb71342261828f14b5a20ab

http://1916-der-unbekannte-krieg.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPxJrO1TsV2ZQoV4i4Pnuvz5BfvcJF5YcB ioRo OYiFW1aYKre5XNku2MHHywcoSCyB4Mrh7RMqsQBPZToBxTNPtlIQ/.../7X3LDRisC3ObXM=

http://dw.uptodown.com/dwn/_WnFkYoPz3BVxk6mKFTENtoG5cUZPf9ivlUsCLLBhuUe4wzeblKOPzDBoKbfknFPkX0NNC_DcJHAbTJ7zpxt0LqhEQUq8rVCnRcSAKZWKGtRLNqhVKxQXHKT7wTgVdVu/bGFshp8qDuZGH_PyiYgjilL-iuPjTxnFuj1C5uEHhJNraZLRM2FeOBckVAYnThP8O497UAKHoPsDmNrXg4r7P_8W_EQyLy7URSbNKYHDmC3HNjWVyy0yqziTTDdo7OTB/.../

http://dlnju.filecondo.com/download_regular_active.php?file=S284181tMgIT&part=1

http://1916.dadiugames.dk/files/.../1916.exe

http://sjc3.dl.dbolical.com/dl/d9e9b2dea1cb303fe4874f85034e5ac4/5306fd53/2011/04/.../1916.exe

http://www.indiedb.com/downloads/mirror/32120/.../39939b4db32ef2fc214cac0089ae4112

Scan 1916.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.