tbrusha_open_studio.exe

TwistedBrush Open Studio Install Program

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Product:
TwistedBrush Open Studio Install Program

Version:
2, 0, 0, 29

MD5:
d48063b58e91334bf7d4c3baa739000b

SHA-1:
12eb422ac6895014ded210fe01282a32d8c56f93

SHA-256:
09938397097b18423154450c0027922615661337a7bae86d8545398e044061ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:58:56 AM UTC  (today)

File size:
17.6 MB (18,466,178 bytes)

Product version:
2, 0, 0, 29

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
3/26/2007 10:33:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:BkWBNGCoRJYeufOZAiVnNtwMdj4z+C+CNEh/2MQUNJRyPtGGR3+p:B/zyuGzNtwMNi+eEF5nAPAGR3+p

Entry address:
0x1377C

Entry point:
55, 8B, EC, 6A, FF, 68, 90, 87, 41, 00, 68, A0, 64, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, F4, 80, 41, 00, 33, D2, 8A, D4, 89, 15, 38, F0, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 34, F0, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 30, F0, 41, 00, C1, E8, 10, A3, 2C, F0, 41, 00, 33, F6, 56, E8, BB, 03, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, FD, 2A, 00, 00, FF, 15, 0C, 81, 41, 00, A3, 4C, F5, 41, 00, E8...
 
[+]

Entropy:
7.9978

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
92 KB (94,208 bytes)

The file tbrusha_open_studio.exe has been discovered within the following program.

µTorrent  by BitTorrent Inc.
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version.
www.utorrent.com
12% remove it
 
Powered by Should I Remove It?

The file tbrusha_open_studio.exe has been seen being distributed by the following 17 URLs.

http://gsf-cf.softonic.com/12e/b42/.../file?SD_used=0&channel=WEB&fdh=no&id_file=42899&instance=softonic_en&type=PROGRAM&Expires=1483934628&Signature=h~ouw61eyKvRUCac22lCHVej4MQpAjdZc4SGpbw1IyW5fR0GQzyPLeLLXAto~PmtPjLDvX5mZ0H1x3ZW20XQsLx3Hy5D1w0zWLXeR0VLw7MA8unTQNZshew7UkauellMfYqkwXvTkLM2~y0HrMGKpZTvIYjsAT80q0Q066VLhtE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tbrusha_open_studio.exe

http://dl.cdn.chip.de/downloads/.../tbrusha_open1724_studio.exe

http://storage.darmoweprogramy.org/tbrusha_open_studio.exe

http://www.ranchsendgift.com/dEu8MZxpKRb5W_KRDolifV4mSXfEVm513ZtlCU0MAadxMCxMtRz1Wv1E52h8yiTDZvJvifro4PiIenHt0looDdCyPjUCXfJOqgk7TArcmgl3siYOlJctJbq0yzpark9ex6bU_v0KuR8RgBl2mIq8wHyuR6SVaovJS1DhHLoO0M5L6rHjil5rnUsQEdjUCGiPIIJVhmHaRB Eq4IEqPVXEBONqo9fNA==-GzcAAERveH6c56JWfILiGAfs39Ng20A4eAyfcwrlozVG K389wPtWPiMrvdNGMCg1Qmf

http://gsf-cf.softonic.com/12e/b42/.../file?SD_used=0&channel=WEB&fdh=no&id_file=42899&instance=softonic_en&type=PROGRAM&Expires=1470510143&Signature=S5p3GqvtEHHYy2aruoe37QIZX6LzfNKSLoDhxaOIlW7lqLque2h9kAlXRdyZ7409TCa-ZWlUJnTaQSrtgCI1nmb0U2WSDZ5MR0znCr2uNTYUd7gDLmK-u56dcWGJiXkzkJH~D9K2Ujb1QNYQemqWubRlyPS0x593iMJtDpfwJIg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=tbrusha_open_studio.exe

Scan tbrusha_open_studio.exe - Powered by Reason Core Security