home

compatibility table of grade up parts for mini 4wd.exe

Avi Podavsky

The application compatibility table of grade up parts for mini 4wd.exe, “Installer for WinterSoft” by Avi Podavsky has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Tarma Installer installer. The file has been seen being downloaded from superfilesdatak.asia.
Publisher:
WinterSoft  (signed by Avi Podavsky)

Product:
WinterSoft

Description:
Installer for WinterSoft

Version:
2013.10.31.1157

MD5:
c10bf6e120de83bd72abf0ecdb6fc4de

SHA-1:
668354fcd3703f1198f0032746456bea05cd0035

SHA-256:
8a315edbc13e8e30001d21dd5e7c859add89a3098bb062c04f2442af0f71edaa

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses Web-Pick's 'File Product', an Installer which wraps various products and downloads and installs it silently through the process, hosted on TusFiles.

Analysis date:
12/25/2024 12:45:43 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware (M)
17.2.19.13

File size:
304.2 KB (311,520 bytes)

Product version:
1.0.0.1

Copyright:
Copyright © 2013 WinterSoft

Original file name:
TSULoader.exe

File type:
Executable application (Win32 EXE)

Installer:
Tarma Installer

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\compatibility table of grade up parts for mini 4wd.exe

Digital Signature
Signed by:
Avi Podavsky

Authority:
COMODO CA Limited

Valid from:
12/19/2012 8:00:00 AM

Valid to:
12/20/2013 7:59:59 AM

Subject:
CN=Avi Podavsky, O=Avi Podavsky, STREET=Rabina 8, L=Tel Aviv, S=Tel Aviv, PostalCode=69395, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
5D3DDFA793E1D90EDC661CF311773BF6

File PE Metadata
Compilation timestamp:
3/12/2013 4:51:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x14DB

Entry point:
55, 8B, EC, 81, EC, 2C, 06, 00, 00, 53, 56, 33, DB, 57, 66, 89, 9D, DC, FB, FF, FF, 89, 5D, F4, 89, 5D, FC, FF, 15, 74, 30, 40, 00, A3, 08, 44, 40, 00, FF, 15, 70, 30, 40, 00, 8B, F8, 8D, 45, EC, 50, FF, 15, 6C, 30, 40, 00, FF, 15, 68, 30, 40, 00, 8B, F0, F7, D6, 33, F7, FF, 15, 64, 30, 40, 00, 33, F0, 8B, 45, F0, 33, 45, EC, 68, 04, 01, 00, 00, 33, F0, 8D, 85, D4, F9, FF, FF, 50, 53, FF, 15, 60, 30, 40, 00, 85, C0, 75, 41, FF, 15, 5C, 30, 40, 00, 83, F8, 78, 75, 1A, 68, A8, 32, 40, 00, E8, 43, FB, FF, FF...
 
[+]

Entropy:
7.9593

Developed / compiled with:
Microsoft Visual C++

Code size:
7.5 KB (7,680 bytes)

The file compatibility table of grade up parts for mini 4wd.exe has been seen being distributed by the following URL.

http://superfilesdatak.asia/v388?installer_file_name=compatibility table of Grade Up Parts for Mini 4WD

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.