home

angry-birds-epic.exe

OHPUIR

K.S.-GRUPP

The application angry-birds-epic.exe by K.S.-GRUPP has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
©Adanacis ehereltifa ustegodel   (signed by K.S.-GRUPP)

Product:
OHPUIR

Version:
3.4.6.7

MD5:
f2fc9768b2d4f0f732be85c9d4dd24e9

SHA-1:
c2a042d9e97dbe7dbe49e2b71153fec29abe8bdc

SHA-256:
31c9b3b9e70beeb3c9538385b7feeecca4db415cd0ac1d41efd1bdfa1a2e8264

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 3:16:50 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Bundler (M)
17.2.20.3

File size:
6 MB (6,285,552 bytes)

Product version:
3.4.6.7

Copyright:
©Adanacis ehereltifa ustegodel

Original file name:
ohpuir.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\angry-birds-epic.exe

Digital Signature
Signed by:
K.S.-GRUPP

Authority:
COMODO CA Limited

Valid from:
12/2/2016 2:00:00 AM

Valid to:
12/3/2017 1:59:59 AM

Subject:
CN=K.S.-GRUPP, OU=K.S.-GRUPP, O=K.S.-GRUPP, STREET=Bud 17 V Vul Dotsenka, L=Chernigiv, S=Ukraine, PostalCode=14032, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
5B5FA3D866750075EAEBBD10F74E4CFF

File PE Metadata
Compilation timestamp:
9/11/2014 4:32:36 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x1FB240

Entry point:
55, 8B, EC, 83, EC, 30, 0F, B7, 45, E8, 39, 45, FC, 75, 0F, 8B, 4D, E0, 3B, 4D, F0, 75, 07, C7, 45, F0, 00, 00, 00, 00, 81, 7D, F4, AF, 01, 00, 00, 73, 79, 8B, 55, F8, 89, 55, DC, 8B, 45, DC, 83, E8, 48, 89, 45, DC, 81, 7D, DC, D5, 00, 00, 00, 77, 57, 8B, 4D, DC, 0F, B6, 91, 9C, B4, 5F, 00, FF, 24, 95, 84, B4, 5F, 00, 8B, 45, F0, 03, 45, FC, 89, 45, E0, EB, 45, 8B, 4D, F8, 03, 4D, F8, 0B, 4D, F4, 89, 4D, E8, EB, 37, 8B, 55, E4, 81, C2, DE, 02, 00, 00, 89, 55, FC, EB, 29, B8, 91, 02, 00, 00, 2B, 45, F4, 03...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2 MB (2,074,624 bytes)

Remove angry-birds-epic.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.