home

WOTBot.exe

WOTBot

Microsoft

This is a setup program which is used to install the application. The file has been seen being downloaded from s10710.chomikuj.pl.
Publisher:
Microsoft

Product:
WOTBot

Version:
1.0.0.0

MD5:
d57cb287214ae2d0b9e4c7e5f1757764

SHA-1:
154edd82319ce5d020233809c9b33cc3c93c25a2

SHA-256:
3784364dadb4bcae3d1f3b55d3dd941a8639361f4bb4e5082b08f997f89ff8c2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/19/2024 6:56:08 PM UTC  (today)

File size:
117 KB (119,808 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Microsoft 2011

Original file name:
WOTBot.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\wotbot.exe

File PE Metadata
Compilation timestamp:
2/20/2011 9:24:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:HU0Ck6jqqOzPZNH0MQMb/sCsVQC4UPpg2sTSn9AGH0MQMb/sCsVQC4:Yj6PrH0C25mSOGH0C

Entry address:
0x171DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 68, 00, 00, 80, 10, 00, 00, 00, 80, 00, 00, 80, 18, 00, 00, 00, 98, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 05, 00, 02, 00, 00, 00, B0, 00, 00, 80, 03, 00, 00, 00, C8, 00, 00, 80, 04, 00, 00, 00, E0, 00, 00, 80, 05, 00, 00, 00, F8, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
84.5 KB (86,528 bytes)

The file WOTBot.exe has been seen being distributed by the following URL.

http://s10710.chomikuj.pl/File.aspx?e=rnrRSZEEYNvWpEiAA_rwDRB4VNyPdXmpt3Q9k8_AMFcLRTiSuEYvsLW672Oco94Wb7J4PLRo_vWV3V_85I_NCPrs2gJX2SVHmr-zFJTo6cUJr6ft8gPfzt5WVMHabsikh65udNRf7dnRU03LONrZyw&pv=2

Scan WOTBot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.