home

gamecenterloader_35dbc44b02e8d4d35e0811c007c11900.exe

GameCenter Mail.Ru

Mail.Ru Games LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from vk.com and multiple other hosts.
Publisher:
LLC Mail.Ru  (signed by Mail.Ru Games LLC)

Product:
GameCenter Mail.Ru

Version:
3.0.1173.32869

MD5:
e385996273b03c0378ea342b07158935

SHA-1:
a63ce9695147e3c3f6d3b3f414416f3b7e03d721

SHA-256:
06be8bc8145c6c171e684d8dd8f8b427cc703acf8c016a61f8f2c841583b45fd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 11:21:55 AM UTC  (today)

File size:
3.9 MB (4,095,872 bytes)

Product version:
3.0.1173.32869

Copyright:
Copyright (C) 2016 LLC Mail.Ru

Original file name:
Игровой центр@Mail.Ru.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Mail.Ru Games LLC

Authority:
Symantec Corporation

Valid from:
1/16/2015 3:00:00 AM

Valid to:
1/16/2018 2:59:59 AM

Subject:
CN=Mail.Ru Games LLC, O=Mail.Ru Games LLC, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
4B1583785609B4EDF9AFA914E471CA0C

File PE Metadata
Compilation timestamp:
2/12/2016 6:05:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:+STrzRajML35IrI9pBGRKQd37l5DV5Pyrz0NJNTsir5D9dnmxS:DrzRSMD5IrL3b/PqANJtdr7dp

Entry address:
0xB274D0

Entry point:
60, BE, 00, E0, B5, 00, 8D, BE, 00, 30, 8A, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, F2, 56, B2, 00, 57, 83, C3, 04, 53, 68, C4, 94, 3C, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Code size:
3.8 MB (3,977,216 bytes)

The file gamecenterloader_35dbc44b02e8d4d35e0811c007c11900.exe has been seen being distributed by the following 36 URLs.

https://vk.com/al_apps.php?act=download&aid=4775428&hash=2d9c28932e02a09733

https://vk.com/al_apps.php?act=download&aid=4775428&hash=3326a8dc0bfe0df782

https://vk.com/al_apps.php?act=download&aid=4775211&hash=caa63387395c2c8fa9

https://vk.com/al_apps.php?act=download&aid=4775428&hash=2cdfb266fb97ca7f01

http://vk.com/al_apps.php?act=download&aid=4775428&hash=67bba20750f65298e6

https://vk.com/al_apps.php?act=download&aid=4792019&hash=4c8f6eace1df3cd3f0

http://vk.com/al_apps.php?act=download&aid=4775428&hash=0e488c3199c6d902cf

https://vk.com/al_apps.php?act=download&aid=4792019&hash=0297395391314a6911

https://vk.com/al_apps.php?act=download&aid=4792019&hash=c5022686bdd6ba6b9d

https://static.dl.mail.ru/GameCenterLoader_VK1khw92oymaucg4srwpqnb_AppID4775211.exe

https://vk.com/al_apps.php?act=download&aid=4775211&hash=3bdb813e9691341ba9

https://vk.com/al_apps.php?act=download&aid=4775211&hash=1761ca44109fce082f

https://static.dl.mail.ru/GameCenterLoader_VKqakw8flg0tglyfsrisu75_AppID4792019.exe

https://vk.com/al_apps.php?act=download&aid=4775428&hash=99e5ea6562c8031962

http://static.dl.mail.ru/GameCenter_19_1Chnl29a.exe

https://vk.com/al_apps.php?act=download&aid=4775211&hash=1e61e0e850cc1cac09

https://vk.com/al_apps.php?act=download&aid=4775211&hash=df7b05ffc450d11555

http://vk.com/al_apps.php?act=download&aid=4775413&hash=39829c403e8907ce8a

http://vk.com/al_apps.php?act=download&aid=4792019&hash=a02ef03c1b4d341253

https://vk.com/al_apps.php?act=download&aid=4775428&hash=7a2a022ac88c6f0d44

https://vk.com/al_apps.php?act=download&aid=4775428&hash=78a1fb9192503d61d9

https://vk.com/al_apps.php?act=download&aid=4775413&hash=2d193a3d0bbc35a31e

http://static.dl.mail.ru/GameCenter_5_6410Chnl24a.exe

http://vk.com/al_apps.php?act=download&aid=4775413&hash=b0618a2982b9907693

https://minigames.mail.ru/forward?gcPromo=1&to=http://.../GameCenter_3_67Chnl26a.exe

http://vk.com/al_apps.php?act=download&aid=4775376&hash=96e4299face58c1c8f

http://soft.mydiv.net/win/dlfile4c3ef_292874/.../GameCenter_chnl10a.exe

http://static.dl.mail.ru/GameCenter_19_1100Chnl29a.exe

https://static.dl.mail.ru/GameCenterLoader_VKf4cfqmzmeblyirs08gwwb_AppID4775211.exe

http://static.dl.mail.ru/GameCenter_chnl10a.exe

Latest 30 of 36 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.