home

GWTool.exe

GWTool

This is a setup program which is used to install the application. The file has been seen being downloaded from download1595.mediafire.com and multiple other hosts.
Product:
GWTool

Version:
0.3.0.0

MD5:
a149942a72d5a5bce221bd02f19bc5b9

SHA-1:
35bc0fdc57a1d0366a9d1ba809f47aac70be1c5c

SHA-256:
1f0602cc7bfd8228a57761efc0e96ef44076f14b7b83ef1b97df2bcfecceff4c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:24:05 PM UTC  (today)

File size:
226 KB (231,424 bytes)

Product version:
0.3.0.0

Copyright:
Copyright © 2012

Original file name:
GWTool.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
12/21/2012 2:36:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:ckg4mk4dimaqp0RaVbJ1KswHkg4mk4dimaqp0RaV:fRYukbJ1SMRYuk

Entry address:
0x1F3DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 60, 00, 00, 80, 10, 00, 00, 00, 78, 00, 00, 80, 18, 00, 00, 00, 90, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 02, 00, 00, 00, A8, 00, 00, 80, 03, 00, 00, 00, C0, 00, 00, 80, 04, 00, 00, 00, D8, 00, 00, 80, 05, 00, 00, 00, F0, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
117 KB (119,808 bytes)

The file GWTool.exe has been seen being distributed by the following 50 URLs.

http://download1595.mediafire.com/0spewdd969sg/.../GWTool.exe

http://download1595.mediafire.com/byh2remkb06g/.../GWTool.exe

http://download1934.mediafire.com/95k8w2p83qdg/.../GWTool.exe

http://download1934.mediafire.com/ao3o43mb9k3g/.../GWTool.exe

http://download1934.mediafire.com/ao7v6u6s3alg/.../GWTool.exe

http://download1934.mediafire.com/b53x500aj8fg/.../GWTool.exe

https://doc-0g-00-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6ht4ucs5486mefk25c963g8d04632f0p/1477476000000/04373081904441546220/.../0B7fELzFjNKKOVG5lbk10b2R4Q0U?e=download

http://www63.zippyshare.com/d/b1FkMFpn/.../GWTool.exe

http://download1595.mediafire.com/zwo1sb5bcvmg/.../GWTool.exe

http://download1934.mediafire.com/rwvvxg30u6jg/.../GWTool.exe

http://download1595.mediafire.com/qysagh0v5wqg/.../GWTool.exe

http://download1934.mediafire.com/k99ubwz15xbg/.../GWTool.exe

http://download1934.mediafire.com/zyigw4ta6iug/.../GWTool.exe

https://doc-0g-00-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/qjntkk39i066jqfhk6tlaoj49nlg1epc/1477742400000/04373081904441546220/.../0B7fELzFjNKKOVG5lbk10b2R4Q0U?e=download

http://download1964.mediafire.com/kelyya18ntqg/.../GWTool.exe

http://www63.zippyshare.com/d/b1FkMFpn/.../GWTool.exe

http://download1934.mediafire.com/4sed47gb9bbg/.../GWTool.exe

http://download1934.mediafire.com/3t42adhxjemg/.../GWTool.exe

http://download1964.mediafire.com/9w59530k36fg/.../GWTool.exe

http://download1964.mediafire.com/d517wp7vgteg/.../GWTool.exe

http://download1934.mediafire.com/dnqc702sqqcg/.../GWTool.exe

http://download1964.mediafire.com/74r911y8r0eg/.../GWTool.exe

http://download1934.mediafire.com/j1o1r560pczg/.../GWTool.exe

http://download1934.mediafire.com/dw88pbnspkjg/.../GWTool.exe

http://download1934.mediafire.com/r76820xz2b5g/.../GWTool.exe

http://download1964.mediafire.com/6ez1a3486hag/.../GWTool.exe

http://download1964.mediafire.com/wwvydut2zfcg/.../GWTool.exe

http://download1934.mediafire.com/04wupesj4jdg/.../GWTool.exe

http://download1964.mediafire.com/8ybbms4ld6wg/.../GWTool.exe

http://download1964.mediafire.com/bbep7gswbung/.../GWTool.exe

Latest 30 of 118 download URLs

Scan GWTool.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.