home

winstub.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from bannergame.googlecode.com.
MD5:
e70c8b69a3d5bd1e1627d5436e8de5e5

SHA-1:
60ab0032072318abef8740d068a340420ceacf1d

SHA-256:
1893e17cdf9a0b56e62ff81446dcd8a0565be5d7d87f22c141685f403eddfb80

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/28/2024 2:57:18 PM UTC  (today)

File size:
578 Bytes

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3:m/mlRgE/lpl4XV6KOFkjXFeyHRjyM1KOZ:HlRgEt8gKOKjXFeyxj1h

Entry point:
4D, 5A, 42, 00, 02, 00, 00, 00, 20, 00, 11, 00, FF, FF, 05, 00, 00, 01, 00, 00, 00, 00, 00, 00, 3E, 00, 00, 00, 01, 00, FB, 61, 6A, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
1.5 GB (1,643,839,489 bytes)

The file winstub.exe has been seen being distributed by the following URL.

https://bannergame.googlecode.com/svn/TP_orga/trunk_80x86/TASM/.../WINSTUB.EXE

Scan winstub.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.