» detskie pesni - babushka ryadyshkom s dedushkoy zaycev net.exe
Overview
Analysis
File Details

detskie pesni - babushka ryadyshkom s dedushkoy zaycev net.exe

Onlain Sekyuriti Sistems, OOO

The executable detskie pesni - babushka ryadyshkom s dedushkoy zaycev net.exe has been detected as malware by 1 anti-virus scanner.

File name:

Publisher:

Onlain Sekyuriti Sistems, OOO (signed and verified)

MD5:

e1d8ee68af9682ff0b5b3717f9bab5f5

SHA-1:

e92dacf774e94254e78c6522cabeb9bd1da4f8b9

SHA-256:

43a6fd9423fa4d8fbb6a1935f0b4ce53caefb18fd7cd9192903f6683c41a8164

Scanner detections:

1 / 68

Status:

Malware

Analysis date:

2/27/2025 10:16:52 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP (M)

17.3.4.10

File size:

400.9 KB (410,528 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\detskie pesni - babushka ryadyshkom s dedushkoy zaycev net.exe

Digital Signature

Signed by:

Onlain Sekyuriti Sistems, OOO

Authority:

COMODO CA Limited

Valid from:

3/26/2014 5:00:00 AM

Valid to:

3/27/2015 4:59:59 AM

Subject:

CN="Onlain Sekyuriti Sistems, OOO", O="Onlain Sekyuriti Sistems, OOO", STREET="12 Komn 42, ul.Vrubelya", L=Moscow, S=Moscow region, PostalCode=125080, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

38AA823949978CC988A90C3D6FDCCF0F

File PE Metadata

Compilation timestamp:

4/11/2014 6:32:45 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.18

Entry address:

0x5B72

Entry point:

46, F5, 09, CA, 23, 5C, 24, 04, C1, DA, 0F, 87, CE, 31, CA, A1, 19, FB, 40, 00, 90, 33, 0D, 82, 28, 40, 00, B8, 68, C3, D0, C8, 90, 81, 3D, 96, BE, 41, 00, C2, 92, 12, 81, 05, 14, 9A, 6F, 37, FD, 87, D5, 87, F1, 49, 48, 13, 74, 24, 14, 85, 14, 24, 4A, 40, 46, 4F, 41, C1, E6, 1F, 0F, B6, 10, 87, FD, 39, 64, 24, 08, 81, C2, B8, 5B, F2, 45, 03, 4C, 24, 14, 1B, 7C, 24, FC, 81, C2, C4, 00, 4E, BA, FC, 90, F7, D7, 46, 8A, 1A, 2B, 6C, 24, 14, C1, E1, 1C, 8B, 6C, 24, 0C, 88, 18, 85, 5C, 24, 0C, 4D, 21, FA, BA, FD... 
[+]

Code size:

375 KB (384,000 bytes)

Remove detskie pesni - babushka ryadyshkom s dedushkoy zaycev net.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.