home

10-2_legacy_vista32-64_wdm.exe

CATALYST 10-02

ATI Technologies ULC

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from d2.driverscollection.com and multiple other hosts.
Publisher:
Advanced Micro Devices, Inc.  (signed by ATI Technologies ULC)

Product:
CATALYST 10-02

Description:
10-02_legacy_vista32-64_wdm

Version:
0309

MD5:
d505341d92ee62a65c18c4a8004284ab

SHA-1:
b5d75f22645d9ba4f930294f87133b8fed282e92

SHA-256:
4c262ccaa8f5dd26bfcef093ec58098e0ed8ecf52c840593cb89e1b56975c0db

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 11:33:58 PM UTC  (a few moments ago)

File size:
36.7 MB (38,492,648 bytes)

Copyright:
Advanced Micro Devices, Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Digital Signature
Signed by:
ATI Technologies ULC

Authority:
VeriSign, Inc.

Valid from:
1/13/2010 1:00:00 AM

Valid to:
1/10/2012 12:59:59 AM

Subject:
CN=ATI Technologies ULC, OU=Product Deployment, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ATI Technologies ULC, L=Markham, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
12D6E958F187C55BE20A875CB0D5377C

File PE Metadata
Compilation timestamp:
2/21/2009 8:46:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:PoVu43iINQaCGjRYXq99s72Sk0jT8sAAWihZQY5PSndGuK1bRR:PM7i8SGlpbA2n0ssAALjQus2PR

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, ED, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file 10-2_legacy_vista32-64_wdm.exe has been seen being distributed by the following 18 URLs.

https://d2.driverscollection.com/1b015b9aa982510/e1eb2cecad86eb3312cd1c3b7b58b0434d1c1050d6c9d1a2e0e03359d0379a7c3fd921be86cff9041123c840ff14ab6f589205d7/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/452204ea0a363/6a5c386ec751eedabfa9e6931681c3eceaf836278aa5e97007a04e43fb0bdf67e8d13551dfa3a5c1c68538219ebdaaad57975f3b/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/452204865f4e0/cae4b9d8935dec93b8593493734ae1b27f39811246e35f3b0656086b3484a79c670c9ef2960e5f617de14a4c90465bf0576569b1/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/1247ac9aa29b77c3/2f4a79426a7895f1115b5c91b1f50139838979383e6480451fa5cf4d3936486e8d47f30f6969df6498a9e4bd36270c375729fd30/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/4adfaa2d65c7c/8ea966679dc0115cbb0a1af37aff6861207b3ad5dee8d8f60f677bb57b4d5648e4807cf72d3410d5bf3945d45873814c569aff01/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/2ec2dc9e008296/8e46be5a5eaaf2d7bc2526b1c37548937d309409409a5bcd5fd2d7c7ac635cc8a9c9a2b2e05bc35e6bb06bf1870bb99c57a8e506/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/_7_14182132182232282332601601c2016344f91c9beb6fd513b6/8b63cf5079a467ace0f34d02bcc919876eab193fdb28532f04ddc2e8d6d74a67cee3d2afaec1cc5e9575be4fbd54db0e569d72f3/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driver.ru/2ecbf4f5a44ac0/ed4915dd732f338e08a72b3b34fda31c392fe9c5c6cec5fb29ed2258577f9ed0d25512371def373488faccb5d30ec57c5716b22b/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/1b015bcf1c43d3c/b5b0f1e432ba2253b4865c182e5bf3ab49f5d0ffe92842be39ccadba6035e355e58378bb4c8171aa4082a860ef21cbad5787b87f/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

http://files.getdrivers.net/video_karti/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/6e9ccf56d2c2/52c8741b5c97920fbf57f6ba83df5004c049ba75a9bfdeab240b8312b269a673c1f739b90d4250b2ff2d67c01e6c91485736afeb/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/2b355ea58508da/3947273a4fa3d583a82cf5593775fb0ed42d22ffa0e15b3ee1dfbd610440b08e139040988a4da4f95bd9df087b389e4556b7670a/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/1d3f79198100ee7/4ed1c99d06cc485633c270ff4ab05038b8069d7a953a241070ae29abc348a3fd69d26487c712be0bc9a27b1a65d9813454edd692/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/1247ac95bc9471f9/a7bc716ec1b32690092ded5c1d1dd38961b54092cbefd38b6ed37a4d568272cc4d022daf85a9fd0215ad86aff84bb65b56e91d58/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://www2.ati.com/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driver.ru/1b015bd67e7156c/4c91dc4946d93bd2b6313417a3ca71aea886a17db5d70675ada374209273a139828fbcca3f4c5a2f8eb0622281256cf855a96ff9/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

https://d2.driverscollection.com/4521fe2d9e4bd/09cb47e306f0a6078d4bdf0eb4e906fef94d48df5f62794dda83943e0535aec04f3b25e370786294a421e609cc3fcd6a54b0a608/1/21/1/.../10-2_legacy_vista32-64_wdm.exe

http://www2.ati.com/.../10-2_legacy_vista32-64_wdm.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.