home

fbiagrfegbhg.exe

Winamp

Inet produkt

The executable fbiagrfegbhg.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
Nullsoft  (signed by Inet produkt)

Product:
Winamp

Description:
Nullsoft

Version:
5.02

MD5:
54c6032d9a14f018eba429fb24b8b8b7

SHA-1:
104d18813e83659846b8b97acef340529ac2602d

SHA-256:
420a8a6db47a046ec6b5534efdb71345f5ff18f655d8ddc61bd13b469d52530d

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/15/2024 5:24:36 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.2.17.16

File size:
1.3 MB (1,380,352 bytes)

Product version:
5.02

Copyright:
Copyright © 1997-2004, Nullsoft, Inc.

Trademarks:
Nullsoft and Winamp are trademarks of Nullsoft, Inc.

Original file name:
Winamp.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\fbiagrfegbhg.exe

Digital Signature
Signed by:
Inet produkt

Authority:
COMODO CA Limited

Valid from:
10/27/2015 6:00:00 AM

Valid to:
10/27/2016 5:59:59 AM

Subject:
CN=Inet produkt, O=Inet produkt, STREET="44, kv.20, Pr-Kt Lenina", L=Saransk, S=The Republic of Mordovia, PostalCode=430003, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EA94EC5CBA3B7367DD60F5F2C486FF6A

File PE Metadata
Compilation timestamp:
6/20/1992 4:22:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

Entry address:
0x8AABC

Entry point:
52, 51, 89, FF, 75, 02, 37, 90, 01, FE, E8, 85, 6A, F7, FF, 4E, 90, 58, 59, EB, 08, 90, 12, 77, 04, FC, 90, FC, 90, 68, 34, AB, 48, 00, E9, EB, AD, 00, 00, 03, 45, EC, 03, 45, E8, 84, CE, F8, 83, C0, 02, 80, 38, 47, 0F, 84, 38, FC, FF, FF, 8B, 45, F8, F6, C5, B2, 66, 81, FB, DB, 27, 03, 45, F0, 03, 45, EC, F7, C6, 9D, 6B, 8B, 0B, 03, 45, E8, F9, 66, 3B, D0, 80, 38, 33, E9, 9E, 09, 00, 00, 89, 3D, B8, F0, 48, 00, E9, B9, B7, 00, 00, E9, 2D, D7, FF, FF, E8, D5, 64, F7, FF, C3, 40, 83, E8, 02, E9, 36, 13, 00...
 
[+]

Code size:
572.5 KB (586,240 bytes)

Remove fbiagrfegbhg.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.