home

WoogambleAgent.exe

Woogamble Agent

Globus Partners Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WoogambleAgent’.
Publisher:
Globus Partners Ltd.  (signed and verified)

Product:
Woogamble Agent

Version:
1.0

MD5:
f8b7b07cd489800c77e7a85cc22125cf

SHA-1:
5e739afe6a816c7027900b3bba16edba2624d771

SHA-256:
ec1277e51f1d21c6428892af742d64f4e0cf18176e8507184057a5f1492c3029

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:56:48 PM UTC  (today)

File size:
1.7 MB (1,737,336 bytes)

Product version:
1.0.1.102

Copyright:
Copyright (C) 2014 Globus Partners Ltd. All Rights Reserved.

Original file name:
WoogambleAgent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\woogamble\woogambleagent.exe

Digital Signature
Signed by:
Globus Partners Ltd.

Authority:
Globus Partners Ltd.

Valid from:
1/29/2014 6:02:41 AM

Valid to:
12/31/2039 3:59:59 PM

Subject:
CN=Globus Partners Ltd.

Issuer:
CN=Globus Partners Ltd.

Serial number:
5322391D79E862AC40CA3AC087F7F6B6

File PE Metadata
Compilation timestamp:
8/1/2014 6:38:08 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:yaY3rXdf22aOtM5PvMq6GkqIuFK1K0IndcxpzAtmqoM9rFyq5EX3jGL3gdaMZUE1:uf2gtSPvj0R4mqoM9VCzl3iE1

Entry address:
0x7FBCE

Entry point:
E8, BB, 5D, 01, 00, E9, 39, FE, FF, FF, 6A, 0C, 68, B0, 91, 50, 00, E8, 8C, 1B, 01, 00, 33, FF, 89, 7D, E4, 33, C0, 8B, 75, 0C, 85, F6, 0F, 95, C0, 85, C0, 75, 18, E8, E7, F3, FF, FF, C7, 00, 16, 00, 00, 00, E8, D3, 00, 01, 00, 83, C8, FF, E9, B6, 00, 00, 00, 56, E8, 6B, 04, 00, 00, 59, 89, 7D, FC, F6, 46, 0C, 40, 75, 71, 56, E8, EF, 5E, 01, 00, 59, 8B, D0, 83, FA, FF, 74, 19, 83, FA, FE, 74, 14, 8B, CA, C1, F9, 05, 83, E0, 1F, C1, E0, 06, 03, 04, 8D, 70, B4, 51, 00, EB, 05, B8, 00, 00, 51, 00, F6, 40, 24...
 
[+]

Entropy:
6.6242

Code size:
900.5 KB (922,112 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WoogambleAgent

Command:
C:\Program Files\woogamble\woogambleagent.exe


Scan WoogambleAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.