spybot_search_destroy_v2.3.exe

Spybot - Search & Destroy

Safer Networking Ltd.

This is a setup program which is used to install the application. This is installed with Spybot - Search & Destroy. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Safer-Networking Ltd.   (signed by Safer Networking Ltd.)

Product:
Spybot - Search & Destroy

Version:
2.3.39

MD5:
99486b7c771bd3049fba3333ed848711

SHA-1:
c79893bffbe071754747487c7bfe931acad5a6f9

SHA-256:
b537d5daa433cfd62862d5577d5936ae1b7a6def78fe8de6e45c403713357289

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 1:59:29 AM UTC  (today)

File size:
44.2 MB (46,392,680 bytes)

Product version:
2.3.39

Copyright:
© 2000-2013 Safer-Networking Ltd.. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\spybot_search_destroy_v2.3.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
3/21/2012 12:00:00 AM

Valid to:
4/8/2015 12:59:59 AM

Subject:
CN=Safer Networking Ltd., OU=Security Solutions, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Safer Networking Ltd., L=Greystones, S=County Wicklow, C=IE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1ABEE452F106342568D826705DC1F4B1

File PE Metadata
Compilation timestamp:
10/13/2013 9:19:32 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:BHcJOWa9bzZLKBnJVixdVH/HVRsA5feSRVlh5hlqxs6PRiveFGz4Z1+O419:9bzeOxdJ/Hvs4feSzzHlqao8wGz2+O4r

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Entropy:
7.9997

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file spybot_search_destroy_v2.3.exe has been discovered within the following programs.

360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
GameSave Manager v3  by InsaneMatt
About 5% of users remove it
Spybot - Search & Destroy  by Safer-Networking Ltd.
Spybot Search & Destroy (S&D) is a spyware and adware removal computer program compatible with Microsoft Windows. It scans the computer hard disk and/or RAM for malicious software.
www.safer-networking.org
8% remove it
 
Powered by Should I Remove It?

The file spybot_search_destroy_v2.3.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/19cefa92c06ab264b9d51a072fbb1244/538dacd7/soft/.../spybot-search-destroy_2-3-28-04-2014_en_10965.exe

http://lb.cdn.m6web.fr/d/c/a/669f9d7cecafa5489c88fb209d45ba9c/548dc1c5/soft/.../spybot-search-destroy_2-3-10-12-2014_en_10965.exe

http://lb.cdn.m6web.fr/d/c/a/15a81a6cc5af507c12462f658a0bf9fe/5470fc83/soft/.../spybot-search-destroy_2-3-12-11-2014_en_10965.exe

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/63f34865a999c53da73539c4c361bff8/54b98106/soft/.../spybot-search-destroy_2-3-14-01-2015_en_10965.exe

http://lb.cdn.m6web.fr/d/c/a/23eee2707491e9c96212c80e7d3b3b2b/5406ff5f/soft/.../spybot-search-destroy_2-3-09-07-2014_en_10965.exe

http://www.filepuma.com/file/1400039404c5710/spybot_search_destroy_2.3/.../0/

http://www.netzwelt.de/.../27341_2-spybot-search-destroy.html?sig=6f59c72e477fccd909d841c1757a703e

http://lb.cdn.m6web.fr/d/c/a/aa8124afcec63394b7f6156edd92f04f/54c26cf7/soft/.../spybot-search-destroy_2-3-21-01-2015_en_10965.exe

http://lb.cdn.m6web.fr/d/c/a/95332b5cf4719425f24f1fda4a84887b/54eb3843/soft/.../spybot-search-destroy_2-3-04-02-2015_en_10965.exe

https://dl.dropboxusercontent.com/u/.../spybot-2.3.exe

http://lb.cdn.m6web.fr/d/c/a/1d3ba190a738f547fa3d7f671e752235/53ee40f6/soft/.../spybot-search-destroy_2-3-09-07-2014_en_10965.exe

http://www.netzwelt.de/.../27341_2-spybot-search-destroy.html?sig=a025250110d3676a24916817056ecc09

http://filehippo.com/download/file/.../

http://www.techtudo.com.br/_/software/.../download

http://lb.cdn.m6web.fr/d/c/a/4919c947256cb9089571af8ecdea3d37/541ec1ed/soft/.../spybot-search-destroy_2-3-03-09-2014_en_10965.exe

http://cdn.datafilehostfiles.com/c?x=R6Hm6ny ThHGH3zKPUqNOy 3djPvHHaps93u9jbxZsY=&c=3nB Z8DQjjIJnpobZh /doQymwJGDJ7/kkum8DWIRaniyasyCJ1LAMWmUeC49oBC83Z5sT/e2CMAwlII5lt4lw==&downloadAs=spybot-search-destroy_2-3-25-03-2015_en_10965.exe&fallback_url=http://nelson.llnw.cdn.m6web.fr/soft/.../spybot-search-destroy_2-3-25-03-2015_en_10965.exe

http://lb.cdn.m6web.fr/d/c/a/18ec2c8ad3a2f0485b7d64eac919541a/54494cf8/soft/.../spybot-search-destroy_2-3-08-10-2014_en_10965.exe

http://dwcdn.html.it/index.php?softname=spybot-2.3.exe&code=1398850614&q=MTAwMDh8c3B5Ym90LXNlYXJjaC1hbmQtZGVzdHJveTE=

http://dwcdn.html.it/index.php?softname=spybot-2.3.exe&code=1404121498&q=MTAwMDh8c3B5Ym90LXNlYXJjaC1hbmQtZGVzdHJveTE=

Latest 30 of 172 download URLs

Scan spybot_search_destroy_v2.3.exe - Powered by Reason Core Security