home

ammyy-admin_3.5.exe

Ammyy Admin

Ammyy LLC

The application ammyy-admin_3.5.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from download.findmysoft.com.
Publisher:
Ammyy LLC

Product:
Ammyy Admin

Version:
3.5

MD5:
9cc23457a7deed9a1b095bc9d7642ab9

SHA-1:
31338c4cbd5022e11d0ac01647b65c6b904b02c1

SHA-256:
78d2e57f5938a16c18a38e0243db39a7175d3f6e87ab15f6d4e95f417b8e5031

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/25/2024 4:33:15 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.8.8.15

File size:
819.5 KB (839,160 bytes)

Product version:
3.5

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ammyy-admin_3.5.exe

File PE Metadata
Compilation timestamp:
1/23/2015 3:36:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:Dc1dZibTD9uOroAgeHvCUt4RtlTc+YCKpQsNvVd1gjlAQPU/q:Dcc/DwOrZgeHv54Rt6+YCkQsNmjlDUi

Entry address:
0x7C41E

Entry point:
60, 3D, CE, D0, 81, F7, 69, DF, 02, 02, 57, 9E, 51, 53, C7, C5, 64, A9, EB, 19, 0F, AD, F1, 0F, CE, 0F, AD, D5, BF, F8, 1C, DB, 43, 34, 00, 0F, C9, 0F, BA, F5, 3C, 68, FA, 8B, 22, 00, C0, EB, 9E, E8, 00, 00, 00, 00, B8, 00, 00, 00, 00, 69, FD, 98, 02, AA, 7B, 87, ED, 87, FF, 28, D7, 81, FA, 1C, D0, 00, 00, 73, 06, D3, E3, 0F, A4, EE, FC, C0, F2, 8D, 88, EE, 0F, AF, F8, 8D, 15, E4, AB, 0C, 12, 81, FD, 7E, 56, 00, 00, 71, 08, 0F, BF, D1, B6, F5, 0F, BD, EE, 68, BA, D4, 13, 00, 0F, B3, CD, 0F, BC, F5, 5F, 0F...
 
[+]

Entropy:
6.7997

Code size:
520 KB (532,480 bytes)

The file ammyy-admin_3.5.exe has been seen being distributed by the following URL.

http://download.findmysoft.com/2015/01/.../Ammyy-Admin_3.5.exe

Remove ammyy-admin_3.5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.