home

angry-birds-rio.exe

The application angry-birds-rio.exe has been detected as a potentially unwanted program by 10 anti-malware scanners. It uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from installerlaunch-mm1.com.
MD5:
866c223ec39a6c2e63ee2effb042fe3b

SHA-1:
85f9cd85ec8e35d60d286315a55f2596a74790ba

SHA-256:
10a3f4b0e9ceda7669feb6f93ef008d67b6fe8272713f36dd92ddf494843053b

Scanner detections:
10 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
4/23/2024 6:28:12 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Strictor.61717
5813571

Clam AntiVirus
Win.Adware.Agent-44073
0.98/21190

Dr.Web
Adware.InstallCore.72
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Adware.Strictor.61717
10.0.0.5366

ESET NOD32
Win32/InstallCore.AU potentially unwanted application
7.0.302.0

F-Prot
W32/InstallCore.P.gen
4.6.5.141

F-Secure
Gen:Variant.Adware.Strictor
5.15.21

Microsoft Security Essentials
Threat.Undefined
1.213.898.0

Norman
Gen:Variant.Adware.Strictor.61717
22.12.2015 20:50:33

VIPRE Antivirus
Threat.4835495
45918

File size:
1 MB (1,082,208 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\angry-birds-rio.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:FdsO5zzvR/0/7jJWlv/SKPMiNUX5fqav:FdsO5nvR/0zjElvqiNUX5fq

Entry address:
0xCA700

Entry point:
55, 8B, EC, 83, C4, F0, B8, C8, 29, 40, 00, E8, 03, EF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.8963

Developed / compiled with:
Microsoft Visual C++

Code size:
828 KB (847,872 bytes)

The file angry-birds-rio.exe has been seen being distributed by the following URL.

http://installerlaunch-mm1.com/.../MightyMagoo-iCorev2.exe&dn=angry-birds-rio.exe&sid=3651-KMG2-5.6&pid=1065&browser=ch&ptrk=s8m3rmv6kkbue6ao111j2im6r2

Remove angry-birds-rio.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.