home

WoogambleAgent.exe

Woogamble Agent

Globus Partners Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WoogambleAgent’.
Publisher:
Globus Partners Ltd.  (signed and verified)

Product:
Woogamble Agent

Version:
1.0

MD5:
069f373fd64d9e92882c0d9ee00bf63c

SHA-1:
bbee90ca09b4887c76cd327326bb5879e1a96c54

SHA-256:
6eb86b3ad21bc762ae40e95f49d3d28c2a85f37db799d6fb85ac4e049515a9e9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:24:03 PM UTC  (today)

File size:
1.4 MB (1,429,112 bytes)

Product version:
1.0.1.1

Copyright:
Copyright (C) 2014 Globus Partners Ltd. All Rights Reserved.

Original file name:
WoogambleAgent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\woogamble\woogambleagent.exe

Digital Signature
Signed by:
Globus Partners Ltd.

Authority:
Globus Partners Ltd.

Valid from:
1/29/2014 6:32:41 PM

Valid to:
1/1/2040 4:29:59 AM

Subject:
CN=Globus Partners Ltd.

Issuer:
CN=Globus Partners Ltd.

Serial number:
5322391D79E862AC40CA3AC087F7F6B6

File PE Metadata
Compilation timestamp:
7/3/2014 2:34:52 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:DrWVNReEF3TlzLfFaAuw7K9q8/SVky0a993jGL3gdaM2elInb:wReMVLwv3y0a99zl3cb

Entry address:
0x68850

Entry point:
E8, C9, 5F, 01, 00, E9, 39, FE, FF, FF, 6A, 0C, 68, 28, A8, 4E, 00, E8, 7A, 1B, 01, 00, 33, FF, 89, 7D, E4, 33, C0, 8B, 75, 0C, 85, F6, 0F, 95, C0, 85, C0, 75, 18, E8, C9, F7, FF, FF, C7, 00, 16, 00, 00, 00, E8, 4D, F1, 00, 00, 83, C8, FF, E9, B6, 00, 00, 00, 56, E8, 6B, 04, 00, 00, 59, 89, 7D, FC, F6, 46, 0C, 40, 75, 71, 56, E8, FD, 60, 01, 00, 59, 8B, D0, 83, FA, FF, 74, 19, 83, FA, FE, 74, 14, 8B, CA, C1, F9, 05, 83, E0, 1F, C1, E0, 06, 03, 04, 8D, 68, 62, 4F, 00, EB, 05, B8, 08, 10, 4F, 00, F6, 40, 24...
 
[+]

Entropy:
6.5451

Code size:
798.5 KB (817,664 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WoogambleAgent

Command:
C:\Program Files\woogamble\woogambleagent.exe


Scan WoogambleAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.