home

13-12_win7_win8_32_dd_ccc_whql.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from d2.driver.ru.
MD5:
d425b670464dfeb89f0deb7b251dcb13

SHA-1:
dad53ce3aa45e8c7bc6db334087c994f19a66e2a

SHA-256:
c650aa6e5cde391d710e46a3642c1fab07387fa335f741794c9c7ca6dc6ada1b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:19:15 AM UTC  (today)

File size:
201 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\13-12_win7_win8_32_dd_ccc_whql.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3:ZmLwDENoV8Ehj5KuuMdJ8rXKCFcGJ4MhcrNFcjpEWoxL/BMfAQfs1OPTMnPBKS96:ZewDkw8WjU+T8Ncc4FMdESfw+TABtQ

Entry point:
3C, 63, 65, 6E, 74, 65, 72, 3E, 3C, 68, 33, 3E, 45, 72, 72, 6F, 72, 3C, 2F, 68, 33, 3E, 54, 68, 69, 73, 20, 6C, 69, 6E, 6B, 20, 77, 61, 73, 20, 67, 65, 6E, 65, 72, 61, 74, 65, 64, 20, 66, 6F, 72, 20, 61, 6E, 6F, 74, 68, 65, 72, 20, 49, 50, 20, 28, 31, 38, 38, 2E, 31, 36, 32, 2E, 33, 39, 2E, 32, 35, 30, 29, 20, 74, 68, 61, 6E, 20, 79, 6F, 75, 72, 20, 49, 50, 20, 28, 31, 38, 38, 2E, 31, 36, 32, 2E, 33, 39, 2E, 36, 31, 29, 3C, 62, 72, 3E, 49, 74, 20, 63, 6F, 75, 6C, 64, 20, 62, 65, 20, 69, 66, 20, 79, 6F, 75...
 
[+]

The file 13-12_win7_win8_32_dd_ccc_whql.exe has been seen being distributed by the following URL.

https://d2.driver.ru/1d3f79197fe9692/b9e13874d9c25441a5cb49487136d19cd4e74d07206ccd734a18b027b7de543227ee8abdd4d78992da884bcbf01daed45773efbc/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

Scan 13-12_win7_win8_32_dd_ccc_whql.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.