home

andromeda_drv_ppd-winvista-vistax64-ver0612a_gb.exe

MD5:
8fa52fd809cfa06e9b327fa42e64875d

SHA-1:
de501d89e9f37a1b2d8e2492b1d15a2e278024ab

SHA-256:
e7228c32be89cfaea1e37d1debc3bac90bbe452898b9072712a2bb2c0c8bcee3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/26/2025 4:23:03 AM UTC  (today)

File size:
181.2 KB (185,596 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\andromeda_drv_ppd-winvista-vistax64-ver0612a_gb.exe

File PE Metadata
Compilation timestamp:
3/27/2000 1:09:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:MtyJreYV2+SDHxamJ/vVpsTC6b6odZXEhID8k0T5vGAXF:McJn6DHYmJFF6vZ0w8kkNGGF

Entry address:
0x83F7

Entry point:
55, 8B, EC, 6A, FF, 68, 10, 23, 41, 00, 68, 30, B5, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, 21, 41, 00, 33, D2, 8A, D4, 89, 15, 30, 53, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 2C, 53, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 28, 53, 41, 00, C1, E8, 10, A3, 24, 53, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 2F, 00, 00, FF, 15, EC, 21, 41, 00, A3, E4, 68, 41, 00, E8...
 
[+]

Entropy:
5.8666

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
68 KB (69,632 bytes)

The file andromeda_drv_ppd-winvista-vistax64-ver0612a_gb.exe has been seen being distributed by the following 4 URLs.

https://d2.driverscollection.com/2ec2dca02a61b1/20f6ee87f9e2596334c03109aa9e7cc6e3ed85deda045e9efdb3b22a09fd1558ad86d32401e7708c5c2d938df59fb4c656d54226/1/559/36/.../ANDROMEDA_DRV_PPD-WinVista-Vistax64-ver0612a_GB.exe

https://d2.driverscollection.com/2b355f6a21d2a5/171e0aa0dcafdcd751d26b545b9dc91b5a97f5bb6548d9937a158eef891d9f00c4b917fb5e233fb5b0e9a52fc765c2c8578381b6/1/559/36/.../ANDROMEDA_DRV_PPD-WinVista-Vistax64-ver0612a_GB.exe

https://d2.driverscollection.com/1247ac9639d0f266/71c89b0c9d414a4bb009f23370e5e97e4b5a358f176e98bbe99091f42464708415f94b3c418db93c54cc4ad2d1dc1db157648035/1/559/36/.../ANDROMEDA_DRV_PPD-WinVista-Vistax64-ver0612a_GB.exe

http://www.sharp.it/cps/rde/xbcr/documents/documents/drv/.../ANDROMEDA_DRV_PPD-WinVista-Vistax64-ver0612a_GB.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.