home

ws1daf2290.dat

WinDS PRO

WinDS PRO Central

Publisher:
WinDS PRO Central

Product:
WinDS PRO

Version:
2015.10.09

MD5:
7c4342c00bfe041ebf197ba67af2cd10

SHA-1:
dcf1afd10d745b8edfa1a29c91e5c15bcf422883

SHA-256:
1a9a93bfdfa35f1b2a844cf0fe355dd2138d8e15b5d6d335406a5cefbd302586

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:37:38 PM UTC  (today)

File size:
27.4 MB (28,744,728 bytes)

Product version:
2015.10.09

Copyright:
WinDS PRO © 2015 WinDS PRO Central

File PE Metadata
Compilation timestamp:
7/9/2014 2:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:tiqVGRKMR2sREGwS+tdKw9tfBTv670/7EYbIgqT+NzehVWLT41r5MfcBkhMcJG2Q:UMeK42qoKwbfBy4Xmr7kmyG2gr/aV0X

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file ws1daf2290.dat has been seen being distributed by the following 50 URLs.

http://dw.uptodown.com/dwn/2LHlM8wBrPtgcOTWH8AOFLkKiK5N7o9nni_kW59e8ytImEavg_ywA7toW-amXcbbnpAB-RPFNp98X1bhjdn7jTs5Am0vSNJrhxaWZpWJY9jlBUPctgjnBUPdrRGk_IjY/UKt9CMxa9U-Gjo_it5YQW--fwPbQdF21m_pXH0A9y7b0zA-jTg0pD7cn6SQph8Y322UKHj6NbVYW7GcwnzuGNTQgmnBUC6rcsbXjzTDxNcjXLkKuF4noFwCcjUOgpchu/.../

http://dw.uptodown.com/dwn/sES7-RshYo3PEDOquNnTJil09e1C0rOaUKmvHJuV0HLVGOttA92j8USQ293CI12GYvKr_fBkk9WKq7o2SWkGowmdyWL1pCoDOUfOrj_2TfuW6y_jGzd0aCJ1SrSywQ3D/T67jWreQp6S8lHo73oVcODKhGFi8odSoYluACWv0jtwXzH14N2lwxOVGUWif-udbCprH93aSKFLNN7UHLlN4rTyLuh-9eVjB3IEkhCj1n5yWrUWL7wJxIgbGaUeJHxDD/.../

http://dw.uptodown.com/dwn/RjgNUXKIruwIZh_qiKEjt1PviDr9xCaSofvfThtxABf4Avkq0fT2hbS-cwaxL_Lvh1hCL2b130VK5cjCEguLce169cf7L1ewVWsfhgeg4FrntTSwUM27HeaiYkxEYqIT/CZBz3vmbDnY5ea8s6iiJ0MJqGiLrf3MbOHhJ0d6BZTLGABjEFOYeR-LYITrcXbxHoOs74RfTfJkjuWa7Xgm0K-059_s5pIcqdvU0kCnsP_CYhNeJPh4zvRy7MGclKnki/.../

https://www.dropbox.com/s/.../winds-pro-2015-10-09-multi-win.exe

http://dw.uptodown.com/dwn/0ZCHDHHxrciNCo8ClgEs8PBF6THnfI5NEzx_tRTqeVYQgCjCXSxz7VBFVoK0JdNnUw0f2dc6FsbghHmUD6T4zqF9sH4rVT6GaLXYLKQ8bD9j0lvPyM4REMdX8JzGLtso/lOlMk6_irkBPurdwUOYmbEinFfE4AdlyUJ9whcfr-PqMIn6KpzHPwgSNYtVuI5MH2PjJJ3qKjB-SwV9Jr9LHYcTdpkJ0GqksiaeHjdaBrS8jIHpjmORc3vxpZjDZXYLn/.../

http://dw.uptodown.com/dwn/rjnQIj2miKlFNPenqGYJPoLxZebWTB7VCNtaHxTmAg2O52Onqj_9DzXlUoquedSlt3Uid61fTmgKRXDdqLzsi2iIBJvkfBsQ65MEndNhnU8-UrEdm_2zQ3tIltxxuaH4/pGmUhf2kE3Bnh1sq7v0XA7mXxdCbsfF1wHbDDrIQuAnpkZx88YoG6OCAtadx9cQWiRUYBpgvDfUoURXekt0wi6tpD10x5GQVm1_12z9fjxd-haSNhzzmevycj3xZipvf/rPd6cUpVIVz8Ij_dJ4EOiQVHTpwjfJyhSFWuflPJPzXjToG6P0xicjlKVHTrYsPIBN-ofEOA0KcvvDs9fOsEfdY10RSrQdB6ftfXshL7YInRZjJXyx-jUJqcd7PD-uAX/.../

http://dw.uptodown.com/dwn/vJW0XYBZIKBvuDiDYb0_J8qU4wGLA-k3HRDWIFknsZRmYdzEePJlvgYsPsaRE_fjDcX1vatCq3fyY6FVWKlpXodPn17T5vwXnkG0HJVQ5ZQKVCB0xmvYMLnjNX3esgaJ/WJ7TUEp8WMN0M8r1ipKTa4Sl9rsNhiQ8PkQv9P3udgUrXOGNL8k8-Ic_UilPZTakjzjqDHhOcWmUrIR_8X96OpTequJCSJLNbbJoEF9ye0iUSYR6thH5t_JGIWyx7t2-/.../

https://dw.uptodown.com/dwn/EChEIovLqK8f7Hwnw51bJEDaHt9oZjYS9kQtsojm_-l0t0JRvqhXyNy7Pzw-UZX0nIWIzZzZ38PlDA2JryDd2RkTvfDatc0LVhR8Jo8RZWajZ89-N202of8qVQsgmtxh/mNsKcaGMzJZsJnb-KnZNkclAoK3Fi8PgWsGBg24XGFReDAiXY-PuQiF2iECXhl-wY_5pq0zh5RQ1e4piD0YwuRfOLNLxlqP-kh-1tryo4Q3xfJMfPX-BrEO1aEEyH3_M/.../

http://dw.uptodown.com/dwn/rizPLHxN8HJ4u9b7xm8NyWhA9wM0NYbaBqY5SIL4l0ql6yJeZ2-zsOgVD9z6zWVF_u3ZWuUKjRooH94bpiQK0ooZtCL1mafntv8OofawnvQ77LUzS3K5EQxlJ_TuExSi/.../

https://dw.uptodown.com/dwn/HbceX3eUk5QvU8ES2eeMGD3KjDNk232X6_VkD993GgaZMFJSmu9q2f2zMmiOQSRWaYB3s7Q_jz6YpVdiBEvf-1PACP_xZikAvvrjzT183yHu6i02jOvkPpBiSNP6HNgq/O98rdJpJx2wEWUNx4O9yooFZ_AqrHWMJpXT-MABmyGzuU_cm9j0WFKzx-L4hKxgewzDLzAu36UQ-3HpXZ-8HjyheNTiYpCWj2MO_d4R63KWjBJv40xNo3670fY6yFGKW/ajsCkwRnBBQIQ7rH4zjFaDf-gqCIsx_Sd1WmRey_sZPykxXT4JvVnxfD_aBh-SvlOPWG5VfoB8ZVPxUVPkD7dEIkXiAj0Qifrg-ArOSYZf6YTkABznhWPIgfRsL-Wcug/.../

http://dw.uptodown.com/dwn/HqOeMMvFpUVKymfhp0_4F1c5xJNNcSr-vsJdoCWXmisWiCGZr9RaNpg-nT3bJ725EZbybBsPAEUMAMWhps6bqJ5KoN9GnoV9tsxFZg3V9Iwk3ArzyT9Iyit0-tRCJMvB/s41nrmQbk4KrSKEsusAZqDfusYhgoKhfBO2iTA1Qdd1iC0_np8z8HZh_MUprpXTaBzY0jydMUPsa7BMOPMU3fnQzvyfNH2vYlJzhiaA65s2JIcijx_HLUUNr-VxbGxj5/.../

http://dw.uptodown.com/dwn/WhYPyIb_EvjsTaUtbCvJHAO0pLSf8vOdzzpsSzaaZ-A4xs4hKF_xiQsn-JcQdWWlNoh_2rTLM54cUkaOTd5E9yVKW7mcUcjx6BcwaM4ydM5buDlM4gc2LwvkE-Mbm991/olhrf1wYuKwl9funOZANKwtc-LSftyBAuQwz6CP4CdrC4d2BlFRaNhbpnSQ5yWfCabgC-1ExlRIB1vH-Iqx8xS2wEKbVC9w4WFuuyjx8ureRXUU2RgI3_FsAll_QigQ2/.../

http://dw.uptodown.com/dwn/AOmf-CJxLfFEIfgtCMsSz2sscoFPzXf0snW9NXgmoRFbUf-8gOywtNXm5iaIPBvbDco4C86d5a_gRqr5ISqkkDe1OdBimtvCrmpHiIy2m25_ZkvCC3azvywQ6kkJDe3P/t9Y0-L-k24EZDTbNyxSDoZ0v2hig0ou30UbjlkR2W0gYzmb_8EmtCC7PVIQiX1txzeEW477mKOC2eOAhHiiLq0BTPw2tvRT3nSc57yS6mFS2D5i0MHSeb1j8SeqG-3MV/.../

http://dw.uptodown.com/dwn/Ll_ijsrDceaDe9f-ffqcdajxi-J6WKYYCvn0giKbhoLd0gwYmDXzAW-JIJ9m4GznRbn-nJL1m4XRPC9eBVOrFAOI85sbDsa_LsIu0VJxjfJCqie1rZOY95KqqI2YGjzS/tD_Sog96rtYXEj0jHodYR7te_lavcv-FAxfOkORMYeNnZcBz71P6K6_j0o9hMRv0gPo2DBZO5wnEZKBV-OGknxC6JmAApclheRcdt9Z0BqestB9H_up5VxiogkgC83e5/.../

http://dw.uptodown.com/dwn/UsmWgtJFev-7QkXQqUCvlZKXIFvic5-1YM1M6lPhqcIqbZdXKMo_72B7-9VuO80eF6QBVW_-RwN3nAYrpnlgDBf7w5baLt6rgF0x_Az2SYHPXQl5kL27h59st8l-4oq7/jmN0RHDRDLeyRKlDab-7Wi-niV0keAb10IJM-qsf3WOgBGFiIfJe3I0u_H5RPEJuA78JLs30Go5-z62Bn1VwBKwrHINKJ0GGOXC3X09zE6g8kOZbzKa3Z9TFbF4oqy9b/.../

https://dw.uptodown.com/dwn/y70UoM72KCJcF2PhTCenAt2GX2C7bGuy8WUQodrQhcjUhTluw-6G6X61lTSzNqkdSaSIzFwxw1O3Np4zNOrTq55wSGzt7SpsbNQd3ZCxzkfx-xHd5jxxIoL9hoaR0VLg/ksWhzxI1wBCMDi4C5LTV1EZhkBLOCcl-xj-8g29cPy6vVpz2Icf_wzSBaSRLXrDGn3gAKlGYIUntKCK8NKfU9q7rWhbfRRvcmmfatoNgiYW2b6Ei8ekk2g1tXkv44KY_/.../

http://dw.uptodown.com/dwn/4uRpr6zKfASzj0Xiluup-b406pSIJVskhpAftFpiHl99ZWd3ASudXoGpW3TK_CCj3kRcQ-9QHrvyB1dP-7JteLxdmpSLp7kJ-YvrhwWX40IWLnKIrAg1Cz6ozd2xfkw1/ELA8pCBpopXGFEh0GTuzFuVgsIpMRsm65-RHKZvjLkP1gVpm_UU55cz7ExzVkYMJl5x44ipZ4ZjcI-sXUv-hXWgX-Virf9gfcZjUeiHQf6YFauhtHkDTBGHMaaOE_q-0/.../

https://dw.uptodown.com/dwn/Hf75D8ucem8eIBM1IY2ZEUqCgdjqICdYQ2xGLMrkpsj8pR4AOrKaP9bzE-hNDaDJIvKi5_e2JzideBgU05ZyfR-hna9klkMwX1nGIjkGmqoq75mTxfIX6RJ5rT6i7spO/PxvUmIKg1E1x1yjWurpS1FIUsKE9K80H7Hu-7GEyN2SheL3t3yoXPoHtaQ5EOVAA-NL73YJnb2Zb_1ld3dp7nyWvyj77G8DUPzYGawU8xetN-5AhtYy7Jay9n6g1Ch-P/.../

https://dw.uptodown.com/dwn/L8sRtE9yY_9adCllvJ9wTvNfgC4pLCFUCGLJ6lZmb5f0pwjuERONsVlMVxdjce52zVHfBIDeX79Xt0QRRr01L6TtPPdAuOEBcwGiaRVmSgFU1gudM8Qd1xcERupMLVDg/5SU-CKXxODoD15SDjXl9Yt6CtFti0l72SPtG2Dj2bHkZ8_G2Irhnb-0z5fSyZBBd_ClEON1Nt1d1FXU_4KE4C1XJnot7mfb1HYlYhqDOGCrz0PsxINdb6VnDhZAchOud/lEnzK9TmZ4n9YWSJ8woRNbvBMZhx9ywD83qZfhsieuBlpps9yjmiWmw0wixRzp4zURM4t-VAMe8mzyHaOkKKUe9bMWjlIoGyxVGypPn5SUnmsq2p_2fEpzjX10erK1oM/.../

http://dw.uptodown.com/dwn/0XpkHRHyX5C5fZ0srM8lhENjmZHqZg2ihXEXwSwJY8bdiGOxbGbuilWd0YwZni5N5E_h9HIO3ZFe92VSXM9NFuYFzgEV6mWihikIOFT9NTqeDpXRsGgKRschgAf14Jvu/Uc6W6JRO52ytRugeMXAYOXmF6OE00V8-XiYgR4jVoewR-I_7u7KIajW7WajjIbyQFKfHrt1QycyNLsi57gz2ebilb4XabeGBkKTr-qTHXqp2MyhKxlZxwgHVjfeN6r6J/u_zzWzGQpl0Z1gCGdawAtPUyrZWRI_6khVRtimjzb3pZHFJZPV1ePaoX40qpdF7m9pA7S8ZXI4dAO0TM6x8BbpHgHiC5RgdT3GgdJAlxfYAvAspSVz4mzTREkbpr7CmT/.../

http://dw.uptodown.com/dwn/vHKLPzWYuQt-eMY6_9EMrSTt-WwR94_7l7B7afIEOIF1fEI4F3XPPUpvZFstQnZipzriYZBqXb5_vzdI6WASBgFjx_YOScVONnMn85e-UDydJPOQTIyEKZL-AQaJWwK5/MvmaMGFr1meil30HTzUkr4QG6ezxmpieYmbskfNGIOmNKcd9QMNaIYRKLihrLvfFoOVgGwGbgDeZqNbzuAbHiOBzPlBxCAgbdHKmhnoUkF6AiHzbSmJ21FSY7qJ1Y0R-/.../

https://dw.uptodown.com/dwn/4ep-FInmdcvnAF_kKWaOG_5GPgbKW6nP-lKBLz56A-PNUZ2w65z1w2oLo5jM-3k0j0-c72kPnmWUfzw5PB5HYjoz0pTAU3Hq1xeniRWrIXd8VOA8HvGULHDv1CI8P3Gx/kndgFF8OAbXEWNgiRkyIVXQu6Mco7bQYuPC3rnJpYW_Gd3acl4_4w4nyfSzopflpcD2PzdGcYYCABS6kJ1YUp_dBf5TBjgTkqCAaOTIF-OnC6C3dEsfhUyrkNBEgiNH9/.../

http://dw.uptodown.com/dwn/hjQmC0SH96T2clom1JUXHsAb78sURhNmwV3D77a0aYaU0OKOUEAJ6cbfDk_KwnNRnJAgs21HOPo7Cal4O2syEKcGYGjgCzos1xbY3pZTKNWfxw_RYBS0zys-UnJ3tQ6f/OqmprcqKAo6OIkk-UluqgcYyZdjpzpC525Y_AkVmhI4_uk9i2IwU-iaQ3yVdk1VcriLauTqKyOiu6pcqPzH6a4bF8WlTuqoR9OVThyU0Z4sHzu2YjxhGWSv5KdewI4uS/.../

https://dw.uptodown.com/dwn/UJlmMIoVuT0NcRm0EIiwJ4b4VR1RPY4AsuIqcPS5Vbz5KE5xAqbrx0cmJuM2eFP7IXbVh9H4ap0Ko7H_8MkWhIFDAT-rhkbdQdLrNtcA5sUoehvI32q7pV-1siBBNOa4/Zzl7uDjROZ9IQnCQjeVAtgZWzsD-NGcqYOVlwhCc64WCEYNqqbKnwRCGCRAfXHi5w9S9v2JTAcg9IRO1YWMliXKKbUYRWU97lq1pOz7sLrRBhGP4RtyEo-6v7xt1M-V3/QNqbjVkS3PwArX5cc2RHmeFbS3URm2XwkhEMYpg5tuhgtfw9mXflenmNjIan7lg223LpbQV3UEmCbEIHzibcf5gaIBu4LwG2G2d1nLZija6oD94om6w1tZgj4h1Yqhl5/.../

http://dw.uptodown.com/dwn/gvFv-wHFPW2ruMUJpuw5BUkA0t8X7uN_ysiQ9-OoCcn-SmcWOREkkMwArt-fNWQ-McvQ05O8LA82QScSgYkNrIpr5IfqNgH_XbV9rVk0DuE5Hd3n1kesSN53Dv7beRKZ/-9IrnhJwP0Q8mz2ZSb1F-zKU8gjGcFwdneoVB9zxwC7aFzQ5j-IcwG2L9lRtv2YG_x15dsBhSVoeJ7H1w1YPAmgBpMjNdn1cqtRR8H7WCkoN6ngumhGDwja62vaJLlCl/.../

http://dw.uptodown.com/dwn/6oT6CKdVxiuyYBMigvyQMO4BbzKNQPHgPuXyjwFSJ_xnEYd4ddZ0dsdmW1QFYrO2cS7MfvdTb9z5kC28noZOeFg6MX7XGQH0wET_gIYbGWeW3-IQuNCAfNJ66jrkdi4z/VHHm9kPg03DxMlcsFCp7qV9lPv_1LjtRjCCzJ8gd9kRaIbNGFbyHQBAGKZkkJM3NXZurFFCOuoy3KTrnAnZYm8KfwaQXc0_w0RDNZkjZ1VKaefpvG5LKhxh5vrkh4VBi/.../

http://dw.uptodown.com/dwn/Sojv1wwYwTpM_Ysd0LwmnpbgBZfujnUIn7JJma2qoXaz8nr_62UNXJKf2O1edUACUlUu6R3HwagjdC_VM8wl2WrwCChWSWovxVQgk1ihU89TiWsrgGQOxY0520HiaN8V/ue0mLBpP936TEdA5G1j_5Hyu5mOz6GSlGgqS0AG7iJGqv4kNUn3ZMueH72WgWkOJV_oZlU54n15RW45NYYLNj8jp-AwCfi5pfhPNZu-Ib0_p-yItZOhto-E06mJb4j6N/.../

http://dw.uptodown.com/dwn/ZNK-KQMZnK8PQ6EY2Ga_fxGFsOOzSvLH506VQycAhJPF_F2FSN1S2ijjwRra6bP3Nh97nCrTFwDOrAj2jjfkeI7rG5hiUsvaHWTXK2qNzQqb80-XPLL4iZyTjW1M_SUD/eYFr3EhbduVow8LDR3EWpYYusCCtPzYCQQfJ57NcDIGrKZY-Q0Igg4Fr9G6oTv7eMF_ByhcNjFM94joI8hnf57xWFlYye2UiHfuL-sVLpOI5jA4oAUtKdC3F73Cz7ycf/.../

https://dw.uptodown.com/dwn/Xe-6r_MsbxY51pLlY7MrVoBEJLX9T10C1FcSHJ8hqUS3At_nQy0_27aiFIDsHqHZMX60xXEkURB2nIacClMLO3IsPWZkstzA7yop0joneeVtSItDs8NlNcs2Ui2-h-10/l_puQ1OdFGtJYeewXT2n-LijKIpbOa3NU6HrfTLySlVWLp7urcZXLQBJZMkP3XOoPZ1PKxVSKNLQpRh-6_WfqWsFGNfC5zZjqOQnbxv_XCBuRoxA3bxMsbSIv20bJekB/7fo7It6rwQhsJlhn47iKn5AMPqp5pMMaKLKG9X5ixsnn6ZLe7tbD5LCqFZEhK6OTS7Bat2nXdjfnzyS_YVKZlRBYYfedSL_FeFRcSHjFq0d5nMP8UdiPFx9vz8GDP66c/.../

http://dw.uptodown.com/dwn/K6Q67FFLte2fimoNgo-zfC8ay-WLDV-SRqv1KQYucFPb4pBoM1H7JyV9WTa8TtoEH1e-cB0zCl4SVNSukZN89U2AEvPewRTpwxrzF0IoRxi5DCcrX48FMCJOy8oBlnA6/NZWVhbfT6HI2y3OpuAI2jA14vF8RlqObZC_pwm2FwF5hFPObzt8ASJnPhZD_Gd0hlDU4Bm-sMpw30Vf2eoRcnqslnZwWCgPP39Ut2P3rWEJ1i3pC_8s9Jpb2AUr32U3g/.../

Latest 30 of 701 download URLs

Scan ws1daf2290.dat - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.