home

instalacao_a_biblia_falada_genesis.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.towerbitscenter.com and multiple other hosts.
MD5:
8445300f534b597bff2a0936f5b847f3

SHA-1:
f57f4bcebbd5b24800300562e435fbcd4403320e

SHA-256:
5769bfce82fb6990f00ed8a843cb384b91ba26e54a063a3af7f818997eca0435

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/30/2024 8:30:45 AM UTC  (today)

Scan engine
Detection
Engine version

Norman
Smalltroj.ACJIA
11.20131219

File size:
2.4 MB (2,487,367 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\instalacao_a_biblia_falada_genesis.exe

File PE Metadata
Compilation timestamp:
3/15/2010 3:27:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:NuX4EDc4pLqMd442L0eh/cKjyIhqbt6IeeykJ+5xOmUnAfXoMYR:NuIEp1qT7ty69dI+BgMu

Entry address:
0xA7B1

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, BE, 2B, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, D0, A7, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, AF, AC, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 40, 22, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 44, 22, 41, 00, 8D, 45, E4...
 
[+]

Code size:
66 KB (67,584 bytes)

The file instalacao_a_biblia_falada_genesis.exe has been seen being distributed by the following 12 URLs.

http://www.towerbitscenter.com/3fPq_wK7HUoLU3pzVSYwv O1vmuBg98X29VOJoJAzPyH6dfHyduCLXO2o_e5nAvVFjK fYHlZOYti0Csp5wjOYGf5KnFS6PQaHUmdw46RXd2pfLScVvKDTAGcCmJQl9VFohGY8k cNjwZ0i2Y0V1mZzSsEjwuWrBakWQt3 xcmV7eDXNp4nRVfHiqKtfk9Icwi6gXKtENczU12LhnfiUla8exyf0eK3EjcMWOEJbykuqLKvjo_0=-G14AAMTaOW4MMwNZpu_wUEL9Kx5w8SdGnFg3pkVasDG23K0gaMRPQ_VOwvrU8XIVhIZYXOvv0LBQoZO2KBYKDjnyLikwKfJmmWL4Mw==

https://github.com/abibliafalada/abibliafalada-v2/releases/download/.../Instalacao_A_Biblia_Falada_Genesis.exe

http://www.ranchsendgift.com/fxYomWP11L44W nhYmpkJCQ7Ga 83vhXX_IqWuXZKQE4sok3Wnh5lNbnrCwebzR8rHGEGQge3rdNGK4gr8V_vjigL3huykbFfjf8ki2f46xkyW14Whp01_3gxkmTaAR B4yEBWl1R04Yn3bN0C6_Lv5HTHpc IxLZxWuGsZAPexPpxRtoTki9SuJcVeh_UC0MADcvRkpP4CBfWG3pr_tEyBCPc9KMA==-G14AAMTaOW4MMwNZpu_wUEL9Kx5w8SdGnFg3pkVasDG23K0gaMRPQ_VOwvrU8XIVhIZYXOvv0LBQoZO2KBYKDjnyLikwKfJmmWL4Mw==

http://www.ranchsendgift.com/WRY6OndkHVphNRaFp5x_Nf5S_nsPuI _VBvZ7lL_WWGqJuZd PFqD0J6nnTCileacbff6S1CLUe1v Xy11tqNXRTZvDgqFhcLvDbXs12uMSxNGxmkgN35rXPLu6bOTQuu9Ge1TJN4SFE7gWz3bo2C0ZytTk3wkPDiQsL51f I92eXegOvJ vHvIh0WA9BBFOkmDCKAkENP42MUJeArYVsOSEmi8wrQ==-G14AAMTaOW4MMwNZpu_wUEL9Kx5w8SdGnFg3pkVasDG23K0gaMRPQ_VOwvrU8XIVhIZYXOvv0LBQoZO2KBYKDjnyLikwKfJmmWL4Mw==

http://www.towerbitscenter.com/dL2_y1XeYDbvRwkTi6HIlfiaBeglVNQaS3Ux5WovLbQ0Ujyy8q6L5QJUnkXp_TlHs1J 9NNJZTjU4YuMCxRTIirofhzJQhrsQeuKv2pWNLJgce4 9zZ0e9fSWVGOtqToo7j3amhsZTuV0X4z3VyGom_ouAjJhHOCc8hAAbRo1KeuVzChow60EVLFmStIv4yiHJDq_xsTCivIWC7EI5UDkeDnzdLShQ==-G14AAMTaOW4MMwNZpu_wUEL9Kx5w8SdGnFg3pkVasDG23K0gaMRPQ_VOwvrU8XIVhIZYXOvv0LBQoZO2KBYKDjnyLikwKfJmmWL4Mw==

http://www.ranchsendgift.com/njo8bShANhSnkIbRptB6FYACbDLyRM7o8YS8jPyDq0Pfrmyjuw_RgeMkzXp342uvfEL11ewXSyn_ Om9ggu8qxlS UMl8bshhxM_8J9CJDLTKEo5Q_GO9qGKcmdK7 wI2xZQNcqRKjNIErfj8V3O7PRYO2hM1wtDcjbS_Cq7kw5Fn2Y3f1ds0 kBVC5kSSKoFlhCSict3UGxlOou88CIjXYdTKc9 g==-G14AAMTaOW4MMwNZpu_wUEL9Kx5w8SdGnFg3pkVasDG23K0gaMRPQ_VOwvrU8XIVhIZYXOvv0LBQoZO2KBYKDjnyLikwKfJmmWL4Mw==

http://www.ranchsendgift.com/RrRo30us3X7jgr5mj1qZywT5U f2OE1sTlkTOLRWuoLJSao8jy4uTvUcU_RWo4ow6nNW3dLibZvGsmByPXJk5uBVxsLDMj6LWawx fnSoGL6aAekp7B3Cei1xIKHlgiNY_lkG1WRZ7yUqlnGlyQHbeGw9CugVee31IaP4ulx7aH1LzqoKLurhA9FvNmtZD8TMB7IVfI7SUMttTJgAFwyOV2OKNoxg==-G14AAMTaOW4MMwNZpu_wUEL9Kx5w8SdGnFg3pkVasDG23K0gaMRPQ_VOwvrU8XIVhIZYXOvv0LBQoZO2KBYKDjnyLikwKfJmmWL4Mw==

https://github-cloud.s3.amazonaws.com/releases/.../0e065b64-bc65-11e5-8db3-cb957134ccb5.exe

http://www.ranchsendgift.com/INxeVD4aLMa s BvICEM8_w1tS9JRuS32o69bKd0NA7zJcKx28ZSSzXZhCh0wmco49rmhFVL yLr6ZB_H9lRk7VWxCH4NYQ5cv6gwx54fJytfd7hZ5Kmd h7bgVKCwTujxC fJCJJorHiQXa kfIcdov6DEHtPEYEpp0VCP4IDnVmiPYQVisUtZT7A5Ov4sTyYjFaMsPPdc9kJ12liyD9CnRax3dMA==-G14AAMTaOW4MMwNZpu_wUEL9Kx5w8SdGnFg3pkVasDG23K0gaMRPQ_VOwvrU8XIVhIZYXOvv0LBQoZO2KBYKDjnyLikwKfJmmWL4Mw==

https://cloud.github.com/downloads/abibliafalada/.../Instalacao_A_Biblia_Falada_Genesis.exe

https://github.com/downloads/.../abibliafalada/Instalacao_A_Biblia_Falada_Genesis.exe

http://cloud.github.com/downloads/.../abibliafalada/Instalacao_A_Biblia_Falada_Genesis.exe

Scan instalacao_a_biblia_falada_genesis.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.