home

eurotrucksimulator.exe

CNT Bilisim Teknolojisi pazrek tur lt lh Tic. Ltd. Sti

The application eurotrucksimulator.exe by CNT Bilisim Teknolojisi pazrek tur lt lh Tic. Sti has been detected as adware by 7 anti-malware scanners.
Publisher:
CNT Bilisim Teknolojisi pazrek tur lt lh Tic. Ltd. Sti  (signed and verified)

Version:
1, 1, 0, 0

MD5:
c3b88e3c0b3157f41f37e80b6741c5fd

SHA-1:
d62aa738bb472f79a21fa87369b5f4f26ce296c1

SHA-256:
b384d243f88ca5f797387c6b19ac829bad7847a2d507b91b41a5f38ac807e88e

Scanner detections:
7 / 68

Status:
Adware

Analysis date:
4/25/2024 5:16:53 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic_c
2016.0.2941

F-Prot
W32/AutoIt.CR.gen
v6.4.7.1.166

Malwarebytes
PUP.Optional.FreeGames
v2015.10.29.07

McAfee
Artemis!C3B88E3C0B31
5600.6597

Norman
LockScreen.AFX
11.20151029

Reason Heuristics
PUP.CNTBilisimTeknolojisipazrekturltlhTicSti (M)
15.10.29.19

VIPRE Antivirus
Trojan.Win32.Generic
34612

File size:
528.8 KB (541,440 bytes)

File type:
Executable application (Win32 EXE)

Language:
Ingilizce (Birlesik Krallik)

Common path:
C:\users\{user}\downloads\eurotrucksimulator.exe

Digital Signature
Signed by:
CNT Bilisim Teknolojisi pazrek tur lt lh Tic. Ltd. Sti

Authority:
COMODO CA Limited

Valid from:
2/6/2014 2:00:00 AM

Valid to:
2/6/2017 1:59:59 AM

Subject:
CN=CNT Bilisim Teknolojisi pazrek tur lt lh Tic. Ltd. Sti, O=CNT Bilisim Teknolojisi pazrek tur lt lh Tic. Ltd. Sti, STREET=273/1 Sk. Mansuroglu Mah. Narlibahce Sit. No:6 B1 Blok Daire:2, L=Izmir, S=Izmir, PostalCode=35030, C=TR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FD38E0D9B8EC881E28CC1693FCA30FC5

File PE Metadata
Compilation timestamp:
1/29/2012 11:32:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:Z6Wq4aaE6KwyF5L0Y2D1PqLSc8x2HcezkMkBgg/mVKWY:vthEVaPqLSc22Hbzk7BgcYKD

Entry address:
0xB2E80

Entry point:
60, BE, 00, 10, 47, 00, 8D, BE, 00, 00, F9, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
268 KB (274,432 bytes)

Remove eurotrucksimulator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.