home

easyautobit-install.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from fs08n5.sendspace.com and multiple other hosts.
MD5:
688e598481e0d9f39db11f75d1bec3a6

SHA-1:
4ed8455cbadf1ba5c9e90f8448c2c0f718995faa

SHA-256:
815a5857d55284e3ddafd1c05c8f79835d3c14cd9c8dadaa966b08c0ece45e16

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 3:27:19 PM UTC  (today)

File size:
8.1 MB (8,542,931 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\easyautobit-install.exe

File PE Metadata
Compilation timestamp:
5/28/2011 9:04:29 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:kNo4WOLbQgYtEM3NFhSn6AmGBhtt1QP5IIaUZB4F7o1r2gz/kM:kySbRMEM3hTGBh1fUZBk7S1QM

Entry address:
0xB480

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, D5, 2D, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, F3, A0, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 1C, A6, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 48, 32, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 4C, 32, 41, 00, 8D, 45, E4...
 
[+]

Entropy:
7.9984  (probably packed)

Code size:
70.5 KB (72,192 bytes)

The file easyautobit-install.exe has been seen being distributed by the following 19 URLs.

https://fs08n5.sendspace.com/dl/b724e71067c5b512decc32331b5a1608/589224b03a7f0c48/.../EasyAutobit-Install.exe

https://fs08n4.sendspace.com/dl/3958e0141e6decf5ea704d687afeae86/58a008907248fa67/.../EasyAutobit-Install.exe

https://fs08n5.sendspace.com/dl/be4aaa81480e8e6c6973e635b8cb24da/57ea8dbb7302708e/.../EasyAutobit-Install.exe

https://fs08n5.sendspace.com/dl/1aaca8e9c48e91756b06191060546a81/583a57962e30a9d1/.../EasyAutobit-Install.exe

https://fs08n5.sendspace.com/dl/07be3e4e6a480c242db44c8080b738d6/582c51c46dcddcbc/.../EasyAutobit-Install.exe

https://fs08n2.sendspace.com/dl/f994f164f86658d6134b765d0e06f8cf/580a44246b8ec63d/.../EasyAutobit-Install.exe

https://fs08n4.sendspace.com/dl/14edd52fe52ce2f7ae8338a01cd2f74f/583843624b68f91a/.../EasyAutobit-Install.exe

http://download1.uploadocean.com:182/d/.../EasyAutobit-Install.exe

https://fs08n4.sendspace.com/dl/ba3888437d9c9c03c84fba6bea3696b5/57fb718d634b77c7/.../EasyAutobit-Install.exe

https://fs08n5.sendspace.com/dl/9b751913a39f2e230ca71b1ad6bb1681/5803d0f9322a3870/.../EasyAutobit-Install.exe

https://fs08n3.sendspace.com/dl/bddee6b77d98f043b14827d1dc4fa00b/57373e7812e200ea/.../EasyAutobit-Install.exe

https://fs08n4.sendspace.com/dl/b4e7ca8a3691aedd8d01884fe694f2eb/5828c6d80f59c902/.../EasyAutobit-Install.exe

https://fs08n3.sendspace.com/dl/a4fd4a105a93ed92cd395d044dd156ce/57c7db0334baab40/.../EasyAutobit-Install.exe

https://fs08n5.sendspace.com/dl/307f5b6638cbef6178f7945f4f678753/5771176b32448fec/.../EasyAutobit-Install.exe

https://fs08n3.sendspace.com/dl/9a307cbbe8519da5f00cc1f82079e134/57684f320c4ca16b/.../EasyAutobit-Install.exe

https://fs08n4.sendspace.com/dl/b9d094c89456c75ec758ede7ca736981/5753a9422026a0d9/.../EasyAutobit-Install.exe

https://fs08n3.sendspace.com/dl/3a5a84eaeb6b4b11c1feb68cbdd3142d/57301df2580045ba/.../EasyAutobit-Install.exe

https://fs08n4.sendspace.com/dl/71cc715655cd8598c15137be77fb1088/572ce8070acf5b53/.../EasyAutobit-Install.exe

https://fs08n3.sendspace.com/dl/0b6aeba3aa76f91087486af85b5239d8/57220b0924aee967/.../EasyAutobit-Install.exe

Scan easyautobit-install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.