home

first win v1 th by augustogod.exe

The application first win v1 th by augustogod.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from download2155.mediafire.com and multiple other hosts.
MD5:
d13ff9215c5406a1e92bf6652e9570e9

SHA-1:
9abb1acce81c2e94e63d338654f8e56f0a9648c6

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/30/2024 3:49:15 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Riskware.Trainer.Meta (L)
16.3.21.16

File size:
4.1 MB (4,263,936 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\administrator\my documents\first win v1 th by augustogod.exe

File PE Metadata
Compilation timestamp:
6/29/2013 12:45:44 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:PYyVlpB5f3nA/KyGapTG08slvG2rvhLPptNnlmvEJ9b:XpLnaZDxG+vhLeMJ9b

Entry address:
0x15EB

Entry point:
E8, 1C, 1B, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, AC, 27, 00, 00, 89, 45, 0C, 8B, 46, 0C, 59, A8, 82, 75, 17, E8, 6A, 03, 00, 00, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2F, 01, 00, 00, A8, 40, 74, 0D, E8, 4F, 03, 00, 00, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, 89, 5E, 04, A8, 10, 0F, 84, 87, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E, 89, 46, 0C, 8B, 46, 0C, 83, E0, EF, 83, C8, 02, 89, 46, 0C, 89, 5E, 04, 89, 5D, FC, A9, 0C, 01, 00...
 
[+]

Entropy:
7.9752  (probably packed)

Code size:
35.5 KB (36,352 bytes)

The file first win v1 th by augustogod.exe has been seen being distributed by the following 11 URLs.

http://download2155.mediafire.com/ookubn9l8uqg/.../FIRST WIN 1 TH BY__DUCK GZ.EXE

https://fs11n4.sendspace.com/dl/e0f48db455c4c1a94f858fcff652c0f5/57aba8d40fd5f683/.../First win v1 TH By Lejyonertr.EXE

https://fs11n1.sendspace.com/dl/f65cb0f311b34dffdf64bbab3e49692c/57dfa7f6215a3e66/.../First win v1 TH By Lejyonertr.EXE

http://dosya.co/.../First_win_v1.EXE.html

http://download2155.mediafire.com/3wqkh7w871qg/.../FIRST WIN 1 TH BY__DUCK GZ.EXE

https://fs11n5.sendspace.com/dl/7b68de9016b818e2db70317171ac6529/571b26a530f8d45e/.../First win v1 TH By Lejyonertr.EXE

https://fs04n2.sendspace.com/dl/030ead97e17c4954ab7310d1d34e736f/56f3550e057ec5a5/.../First win v1 TH By AugustoGoD.EXE

https://fs11n2.sendspace.com/dl/e7b7346061bce25c1a56ef882d08de40/5781818722d98f58/.../First win v1 TH By Lejyonertr.EXE

http://download2155.mediafire.com/6ot6o5rqf4gg/.../FIRST WIN 1 TH BY__DUCK GZ.EXE

https://fs11n1.sendspace.com/dl/acc101f88f3cc16d4075b55002ea6a0c/575a5f40689db2f1/.../First win v1 TH By Lejyonertr.EXE

https://fs11n1.sendspace.com/dl/f4cd007770a386a28d40bdc1399eaf52/572ea2443c574d74/.../First win v1 TH By Lejyonertr.EXE

Remove first win v1 th by augustogod.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.