home

drayver dlya windows 8 7 vista 32-bit-v54601.exe

Winamp

Inet produkt

The executable drayver dlya windows 8 7 vista 32-bit-v54601.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from ballripjunior.ru.
Publisher:
Nullsoft  (signed by Inet produkt)

Product:
Winamp

Description:
Nullsoft

Version:
5.02

MD5:
d885e8cc9115818e255603c2b8ddf2d7

SHA-1:
4c295bb21eead05fd41d46ce2b62a9a0c1c0a616

SHA-256:
cac29d7c4a75954ed46ca5ccc040a5ca8227c2a5ae125c5e0e93130b0e50d2b6

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/15/2024 5:15:44 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.8.11

File size:
1.3 MB (1,380,352 bytes)

Product version:
5.02

Copyright:
Copyright © 1997-2004, Nullsoft, Inc.

Trademarks:
Nullsoft and Winamp are trademarks of Nullsoft, Inc.

Original file name:
Winamp.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\drayver dlya windows 8 7 vista 32-bit-v54601.exe

Digital Signature
Signed by:
Inet produkt

Authority:
COMODO CA Limited

Valid from:
10/27/2015 6:00:00 AM

Valid to:
10/27/2016 5:59:59 AM

Subject:
CN=Inet produkt, O=Inet produkt, STREET="44, kv.20, Pr-Kt Lenina", L=Saransk, S=The Republic of Mordovia, PostalCode=430003, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EA94EC5CBA3B7367DD60F5F2C486FF6A

File PE Metadata
Compilation timestamp:
6/20/1992 4:22:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

Entry address:
0x8AABC

Entry point:
52, 51, 89, FF, 75, 02, 37, 90, 01, FE, E8, 85, 6A, F7, FF, 4E, 90, 58, 59, EB, 08, 90, 12, 77, 04, FC, 90, FC, 90, 68, 34, AB, 48, 00, E9, EB, AD, 00, 00, 03, 45, EC, 03, 45, E8, 84, CE, F8, 83, C0, 02, 80, 38, 47, 0F, 84, 38, FC, FF, FF, 8B, 45, F8, F6, C5, B2, 66, 81, FB, DB, 27, 03, 45, F0, 03, 45, EC, F7, C6, 9D, 6B, 8B, 0B, 03, 45, E8, F9, 66, 3B, D0, 80, 38, 33, E9, 9E, 09, 00, 00, 89, 3D, B8, F0, 48, 00, E9, B9, B7, 00, 00, E9, 2D, D7, FF, FF, E8, D5, 64, F7, FF, C3, 40, 83, E8, 02, E9, 36, 13, 00...
 
[+]

Code size:
572.5 KB (586,240 bytes)

The file drayver dlya windows 8 7 vista 32-bit-v54601.exe has been seen being distributed by the following URL.

http://ballripjunior.ru/.../260Lyubov.v.bolshom.gorode.9629.XviD_.DVDRip

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.