home

iwbtggv1d2b.exe

MD5:
d08c5131d9d910914882af6ea36c28c3

SHA-1:
da71c7b89e7b0bcf725eb2a0008de3313ead0c0d

SHA-256:
6559ee2346263cff70298e1a36af03283c560fe90d53ec6bcc81b0147115be7b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 6:53:30 PM UTC  (today)

File size:
44.5 MB (46,683,648 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\iwbtggv1d2b.exe

File PE Metadata
Compilation timestamp:
2/5/2012 8:01:46 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:oY3BSw7ivgzs2nh6FLIb34TOaQl08HjbiU9FaFUvQ:TSw7iGs2nhUkqOHl08HjbipT

Entry address:
0x6646E

Entry point:
E8, 54, B9, 00, 00, E9, 78, FE, FF, FF, 6A, 0C, 68, A8, A3, 49, 00, E8, FC, 0C, 00, 00, 83, 65, E4, 00, 8B, 75, 08, 3B, 35, D8, D0, 4A, 00, 77, 22, 6A, 04, E8, 3F, BB, 00, 00, 59, 83, 65, FC, 00, 56, E8, 46, C3, 00, 00, 59, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 09, 00, 00, 00, 8B, 45, E4, E8, 08, 0D, 00, 00, C3, 6A, 04, E8, 3A, BA, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 83, FE, E0, 0F, 87, A1, 00, 00, 00, 53, 57, 8B, 3D, 84, 40, 48, 00, 83, 3D, E4, A2, 4A, 00, 00, 75, 18, E8, 05, 8F, 00...
 
[+]

Entropy:
7.2586

Code size:
522.5 KB (535,040 bytes)

The file iwbtggv1d2b.exe has been seen being distributed by the following 25 URLs.

https://d-cdn.gamejolt.net/data/games/0/98/8598/.../iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_br&type=PROGRAM&Expires=1482223553&Signature=WlPWvVAiIv7dK2DrFrlWZzJZPp1UbkFFlItFteTl4lX0AiLgy6R7KlaSX~vYjgJGaag3utyNH~JZcCSAw9KIyvXjyAWjNjtofss0pjIwqYdEHtg9H9zzebygUHtJ7kzfmWRzVBHuXRn-BznMLbllzoDRrEKry7XC5qJV59RLOFU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://ultradownloads.com.br/.../2,1158912.html

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_en&type=PROGRAM&Expires=1465727156&Signature=LE3hOi-hRPDPuQAoYFzPtGLUdkyX0pznrR0T-IkuHAfqAYdCF5N6Y1BWachjBFJBu5tMGco6TlJOvT3cNlvvI1TJEWMPv4uCkN9NGxuMQW3Xp6LwBMbboOTODdGhwQEjJ3g2~PfvlvEZLn9OGIetriKV1wSuhca0mIIcd5rd2zU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_br&type=PROGRAM&Expires=1479551444&Signature=AhZMBY5VWwACAecqv7BaHgfUtka32XBCBDbCuz7UZcFv4CfJfutZFY16Ddhw2otZYZ40ezHDTZt1T5iXWL0bwmsf7-eAAebSZ5cQyFSvaR2Un6sns4svbh8zmGkXzJDOz509WJefkycOpivShLGVmDtdDQKI-OhqXVCdhJc~ugY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_br&type=PROGRAM&Expires=1459068681&Signature=QtpTEgAEhXEb~GYrpqkw-9xfJfEx5Vef8phiiinRuTJRMcBdcG2Tkv0wPEkSJxojftllQahND0krQG~5R~t-YtnNiL4YA4a4Nh0ig5UdUJJZpl3O9~zi19kmTdDLy-J1eH9JT7XMjBm7yFzj2uwXVp~8AJVEHLRds-E9erfoF1c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_br&type=PROGRAM&Expires=1466229660&Signature=NdWttzq5bGUVSd7Vc9kq2Hw7bMXt1lM-SBcoQ269TJGi23pFJyHBCA2gJlDgdpjzOKd~mXU0Gnkw4lyu0wl1NSOhx662dRqxWH~v-9i35BMQCGZL1x90T3eX8RCT9vGghboH0VqISwF7toWMoKv1yl8lqVuJXR0-4hq-uMrnutQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_br&type=PROGRAM&Expires=1444103271&Signature=dymad6VBTSPcIVgJ2NNwU5rTWx356nbKKuIlfTRms8mUUNQkM4-R8kZyuVjWUfIVXs8nv3yBczsPRjlJ3DF8embFm~urmiiJHFQYuz6qSK4DSCwU7AHh6dbS-dzG7nIY0igfeUlgVMUjRfn39VdwlTxjPaN5R93FDudhpgHFvwk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_br&type=PROGRAM&Expires=1452744057&Signature=EqUAm3Rl37pdJca4p9npN1OJodAwnIaGyP0E7tMpJGOwU1PJ9l-~mlM9ejDJUHRc5bWqRNI-Wa-C--ABmiQ7FXVQMYHgKurxcSG96aB0vW2lilJBEoCqXeQ~Sxd17fGPnAiGKNzGNHfLMYpf4uVd5BV31HOJjmSBh1XAJUZ3l-M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_br&type=PROGRAM&Expires=1453541463&Signature=TOAty3bvOmVa27arDLdgFiAzPykQ4yKcGPg1R5kc9c0YOr9z-LNL9YAgy9Vqx7iZHHzZVE~yk6BHCe1w0WfuRuibDPjp4tGAc2YFXVBKFRfl5LbS9XpXjtoGEv6AOrcy--Jx7c8UNsuMJFVRVS5gbHjxQK0lkZqTftxo75yNOXQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_br&type=PROGRAM&Expires=1421125980&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=AasK7Ffsk-I4djWpVBxtxTKGqRXKOfEF8AKkdETsW0C4Hc0HWsE~uwnuvMCt88~HATl6ETgxpElabX3G3OCg0~S2-pwe43~shOue6qXjUb2RKuFEweDVFSbxNXxvM9VBrhTI76MNHJc22k5LyPwgh-w~oMorSZQXL6AehKQsWR0_&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_es&type=PROGRAM&Expires=1453217030&Signature=GktsxGPb7k6EcVvoMvTnsN71cJedprjdj8SkPxIxokiUJlT3t~4pmEjV3To8vLcGPT~0szHFbaULrfYfqRG~rSn9zNpy3WAVHWnfZDZDuKVFzl1yeg~me~zxMICpvcYoJmRluuWUdL7uzljJFtpyN2jopgJgHcct2zVCL0nVyFA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_br&type=PROGRAM&Expires=1450092570&Signature=Dv7arD72zIEJvBYGXkxSPNu0klvbhnX9asKQ79aT-6ecUPnZwp6Zsc-EcRCvSUzJ-W3fIPplx81e7pWMUl5JKrdxMHqp2EY4V955kJmxllt0tIJ3nKNW8O8PNCwD7KApLBCKDSUAEwpsQ~JoU9I0jLpCVe2Kg6Lg1MLiz4T7ZnY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://gsf-cf.softonic.com/da7/1c7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69674535&instance=softonic_es&type=PROGRAM&Expires=1446293601&Signature=axwFml5wUC-7-H6tL2M5jqQeX1awIlGzdR4KEHZp4JyKiShrXBghVe-W~maLyIxytXWZ8Og9h419yderLfgd51fSyZ56kmcFoRqLOaXTwhhylwNIKRVK1eXnqL~hh4BCVE9pKy9lfqhbAQWqQNriDTeu2QUV92CD0u7OWYDpPbA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=iwbtggv1d2b.exe

http://d-cdn.gamejolt.net/data/games/0/98/8598/.../iwbtggv1d2b.exe

http://d.gjcdn.net/data/games/0/98/8598/.../iwbtggv1d2b.exe

http://data-01.gamejolt.net/data/games/0/98/8598/.../iwbtggv1d2b.exe

http://data-01.gamejolt.net/data/games/8598/.../iwbtggv1d2b.exe

http://download2us.softpedia.com/dl/c9b4939ac9b44530ac13be1a87cd7447/52441b77/200128508/games/.../iwbtggv1d2b.exe

http://gamejolt.com/data/games/8598/.../iwbtggv1d2b.exe

http://data-02.gamejolt.net/data/games/8598/.../iwbtggv1d2b.exe

http://data-02.gamejolt.com/data/games/8598/.../iwbtggv1d2b.exe

http://data-01.gamejolt.com/data/games/8598/.../iwbtggv1d2b.exe

http://data-02.gamejolt.com/data/games/8598/.../iwbtggv1d2b.exe

http://data-02.gamejolt.net/data/games/0/98/8598/.../iwbtggv1d2b.exe

Scan iwbtggv1d2b.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.