home

bookwormdeluxe-110113233-setup.s110113233.c11008813.len.u.dl.exe

Oberon Media Game Runner

iWin, Inc

Publisher:
Oberon Media Inc.  (signed by iWin, Inc)

Product:
Oberon Media Game Runner

Description:
Runner: Extracts and runs the game setup

Version:
.0.4.61

MD5:
566fdd2190b3b8790a57bdb58f7b64ce

SHA-1:
9437a2e93b4f396c99007efbb24cee81af274250

SHA-256:
d14531cd9d0f307f4faa467773240f72926ad1c11d44f71b2544e9ddd4855f0e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:25:35 AM UTC  (today)

File size:
446.7 KB (457,456 bytes)

Copyright:
Copyright © Oberon-Media Inc 2011.

Original file name:
Runner.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\bookwormdeluxe-110113233-setup.s110113233.c11008813.len.u.dl.exe

Digital Signature
Signed by:
iWin, Inc

Authority:
Thawte, Inc.

Valid from:
10/15/2012 8:00:00 PM

Valid to:
11/15/2014 6:59:59 PM

Subject:
CN="iWin, Inc", OU=SECURE APPLICATION DEVELOPMENT, O="iWin, Inc", L=San Francisco, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2C442CC32C41E8C4EADA71867E73A870

File PE Metadata
Compilation timestamp:
2/24/2014 9:07:57 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:QuR5jiw0aCatCfrHmMr4i+CI3+Wfh/LiBc:QuRcw0R2Cf6eO+WfhzEc

Entry address:
0x6E5C

Entry point:
E8, 53, 33, 00, 00, E9, 78, FE, FF, FF, FF, 35, 28, 8A, 41, 00, E8, CF, 15, 00, 00, 59, 85, C0, 74, 02, FF, D0, 6A, 19, E8, 57, 28, 00, 00, 6A, 01, 6A, 00, E8, D9, 34, 00, 00, 83, C4, 0C, E9, BA, 33, 00, 00, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E9, 6A, 0C, 68, 28, 53, 41, 00, E8, 69, 24, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, 38, 8D, 41, 00, 03, 75, 43, 6A, 04, E8, 2F, 36...
 
[+]

Entropy:
6.6181

Code size:
67.5 KB (69,120 bytes)

The file bookwormdeluxe-110113233-setup.s110113233.c11008813.len.u.dl.exe has been seen being distributed by the following 50 URLs.

http://downloads.blaze.com/exe/ni/channel/.../cuttherope-510008682-setup.s510008682.c110341560.len.u04e47dd393ec58436e75e4693f32f95d86f38359.dl.exe

https://downloads.blaze.com/exe/ni/channel/.../hoteldashsuitesuccess-11807553-setup.s11807553.c110402287.len.u15f235d5bc4ee62aee361b57ed59d167353d972a.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../deerdrive-111448437-setup.s111448437.c110341560.len.ue894e3701e7412679584efc323f0376d5f93fffd.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../bigcityadventureparis-510008445-setup.s510008445.c110167437.r1000.lfr.u2c98bf3aa785c6f1bf251db92215727136c993ba.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../pacman-118392197-setup.s118392197.c110341560.len.u1be8c8785c87140c0e513f14e22907977a651b66.dl.exe

https://www.casualgames.com/download?channel=110500670&skuId=sku1250079

http://msnprod.oberon-media.com/download?skuId=sku1210091

http://downloads.blaze.com/exe/ni/channel/.../lostchroniclessalem-119909990-setup.s119909990.c110341560.len.uc1f462844dec06924b04b76d3341384817cdbca5.dl.exe

http://msnprod.oberon-media.com/download?skuId=115600480

http://downloads.blaze.com/exe/ni/channel/.../christmaswonderland5-510009744-setup.s510009744.c110341560.len.u508f7e052187f0c8a5c1c513fe9a9e31359d5a92.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../pacman-118392197-setup.s118392197.c110341560.len.ua41aeaefddc160586872ea8ae6974ad4c0a93381.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../mahjongmatch-111177437-setup.s111177437.c110268333.len.ud9ae72f5ed835f670d78c140c6b91682ac819f87.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../familyfeudbattleofthesexes-117380237-setup.s117380237.c110268333.len.ue7f645bed529afa0526ce6bf3f0cc2990d474109.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../superslamhuntingalaska-510007212-setup.s510007212.c110341560.len.u7147d44b839bd9b8dd7c8e2fb71971e0bb113806.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../alchemy-110208700-setup.s110208700.c52012080801.len.ub694ff207d9d86b806c293062ba3587f8de9078a.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../plantsvszombiesgoty-117080787-setup.s117080787.c110427477.r1506001035.len.u57a070f33ee17868e12f06ed5007cfea24833ddf.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../cuttherope-510008682-setup.s510008682.c110341560.len.uade34543ef77de7818b4887251dec636a1e14cbe.dl.exe

https://downloads.blaze.com/exe/ni/channel/.../carnavalmahjong-510009168-setup.s510009168.c110402287.len.ua7661059096b2e49d27645e4431e56fc4005e68e.dl.exe

https://games.yahoo.net/download?channel=110402287&skuId=sku900064

https://www.iplay.com/download?channel=110341560&skuId=sku1120092

http://downloads.blaze.com/exe/ni/channel/.../igtslotscandybar-510009175-setup.s510009175.c110500670.rcd30demomg.len.u31dfd32f0cc1919c5ebd96f179dcb3fa2820a696.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../gogogourmet-114072167-setup.s114072167.c110341560.len.u90683d37ef70e4a9a7d6d2199d4b0194410f8756.dl.exe

http://msnprod.oberon-media.com/download?skuId=sku1050117

http://downloads.blaze.com/exe/ni/channel/.../mahjongmysteriesancientathena-510008573-setup.s510008573.c110341560.len.u17610b9b07c4339c9c75b651b769fc8d88232971.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../oddlyenoughpiedpiper-510005538-setup.s510005538.c110341560.len.u4c663eed8470e22923273552c2a1504a4c559a7f.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../homemakeover-510009547-setup.s510009547.c110341560.len.u707b9d0d6a2ff679ac6c12460534235a4e754868.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../3dultraminigolfadventuresdeluxe-114075133-setup.s114075133.c110341560.len.u7e37ccda6e1290a9ff85ba0a0d892d03cc02c1c6.dl.exe

http://downloads.blaze.com/exe/ni/channel/.../pacman-118392197-setup.s118392197.c110341560.len.ubba87678471e11cd035ad5b7fc4c338922d1a629.dl.exe

https://games.yahoo.net/download?channel=110402287&skuId=sku1070069

http://downloads.blaze.com/exe/ni/channel/.../bejeweled2-110265407-setup.s110265407.c52012080801.len.ub0bbddf4c2e63b48f2a5c338e3b5d77ac3fd0c94.dl.exe

Latest 30 of 701 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.