» ac97driverver_187.exe
Overview
Analysis
File Details
Downloads (2)

ac97driverver_187.exe

AMD

This is a setup program which is used to install the application. The file has been seen being downloaded from ftp.ziggi.com.br and multiple other hosts.

File name:

Publisher:

AMD

Description:

AMD AC'97 Driver

Version:

1.8.7.4

MD5:

2b05d560f88cf73755af04e590e5a401

SHA-1:

9b2cec6c52563bf7299431877ddf994ab5706efb

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 10:01:20 AM UTC (today)

File size:

5.3 MB (5,575,168 bytes)

AMD

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\documents and settings\usuario\meus documentos\downloads\ac97driverver_187.exe

File PE Metadata

Compilation timestamp:

11/21/2003 4:16:37 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.0

CTPH (ssdeep):

98304:IWQ+HOq++liduCtLBlOMyL2i9aSX6wOLqNKLqNhJ:IWQ+u8xIEMyL2iJX6zn

Entry address:

0x39E0

Entry point:

81, EC, 20, 0F, 00, 00, 56, 57, 6A, 04, FF, 15, 0C, 61, 40, 00, 33, FF, 89, 7C, 24, 40, 89, 7C, 24, 24, 89, 7C, 24, 20, 89, 7C, 24, 28, 89, 7C, 24, 1C, FF, 15, A4, 60, 40, 00, 8A, 08, 80, F9, 22, 89, 44, 24, 30, 75, 2A, EB, 05, 80, F9, 22, 74, 10, 40, 8A, 08, 84, C9, 89, 44, 24, 30, 75, F0, 80, F9, 22, 75, 17, 40, 89, 44, 24, 30, EB, 10, 80, F9, 20, 74, 10, 40, 8A, 08, 89, 44, 24, 30, 84, C9, 75, F0, 80, 38, 20, 75, 0A, 40, 80, 38, 20, 74, FA, 89, 44, 24, 30, 8A, 10, 80, FA, 2F, 74, 1B, 8B, C8, EB, 08, 80... 
[+]

Code size:

19.5 KB (19,968 bytes)

The file ac97driverver_187.exe has been seen being distributed by the following 2 URLs.

http://ftp.ziggi.com.br/driver/.../ac97driverver_187.EXE

http://fichiers3.touslesdrivers.com/.../ac97driverver_187.EXE

Scan ac97driverver_187.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.