home

crazy_birds.exe

Crazy Birds

Media Contact LLC

The program is a setup application that uses the Inno Setup installer. This is installed with Crazy Birds. The file has been seen being downloaded from crazy-birds.software.informer.com and multiple other hosts.
Publisher:
Media Contact LLC

Product:
Crazy Birds

Description:
Crazy Birds Setup

MD5:
e45495fad11d3ddf67c9c9ec34ea05d6

SHA-1:
021ea9cc393801b16d9a0560d0321f03f7fb7747

SHA-256:
d7e1f991fdeb5d2b8ee5c991d95ec61d821549524f81c9b5122b6d71d517b37b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:20:24 AM UTC  (today)

File size:
11.2 MB (11,774,264 bytes)

Copyright:
Copyright (C) Media Contact LLC

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\crazy_birds.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:8+6Jocf3F2jUK0k1isbdz8c0y0Kn5W4LCUCKB9aNyvaYLom0qY6x:8+6Joc/EOk1bph00WjU1B9aNyvDLom0A

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file crazy_birds.exe has been discovered within the following program.

Crazy Birds  by Media Contact LLC
Crazy Birds is a casual video games distributed through the GameTop.com download portal. The trial verison of the game in some cases drops an icon on the user's desktop 'Online Free Games' which links to a partner portal such as onlinefreegames.com.
www.gametop.com/download-free-games/crazy-birds
11% remove it
 
Powered by Should I Remove It?

The file crazy_birds.exe has been seen being distributed by the following 3 URLs.

http://crazy-birds.software.informer.com/.../

http://www.kaboom.pl/files/download/1/1/.../crazy-birds_www-kaboom-pl.exe

http://b.gametop.com/.../Crazy_Birds.exe

Scan crazy_birds.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.