home

mb_driver_lan_atheros_813x_815x.exe

7-Zip

Igor Pavlov

The program is a setup application that uses the 7z Setup installer. The file has been seen being downloaded from www.techspot.com and multiple other hosts.
Publisher:
Igor Pavlov

Product:
7-Zip

Description:
7z SFX

Version:
4.65

MD5:
d9181f33fdbdeeb59d21b9419ed6d88b

SHA-1:
897db7df52867bc7936965d0b536c2db44231568

SHA-256:
bf206a5f3571732d34b1e3af088af4868f17979ef2ecb275104cb6880b442332

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:20:31 PM UTC  (today)

File size:
2.7 MB (2,836,824 bytes)

Product version:
4.65

Copyright:
Copyright (c) 1999-2009 Igor Pavlov

Original file name:
7z.sfx.exe

File type:
Executable application (Win32 EXE)

Installer:
7z Setup

File PE Metadata
Compilation timestamp:
2/3/2009 9:21:07 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:hiq8hjhTX4pG68WdwyDHOmUWgU4a+tHOk/qxh5OxurKBV69yVr/jDffQXllX:hiHh9TY8EuXUgOXixIKBV69yVbf4XX

Entry address:
0x1939C

Entry point:
55, 8B, EC, 6A, FF, 68, 78, CD, 41, 00, 68, 96, 93, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, F0, C0, 41, 00, 59, 83, 0D, 64, 6C, 42, 00, FF, 83, 0D, 68, 6C, 42, 00, FF, FF, 15, F4, C0, 41, 00, 8B, 0D, 4C, 4C, 42, 00, 89, 08, FF, 15, F8, C0, 41, 00, 8B, 0D, 48, 4C, 42, 00, 89, 08, A1, FC, C0, 41, 00, 8B, 00, A3, 60, 6C, 42, 00, E8, 1C, 01, 00, 00, 39, 1D, 40, 29, 42, 00, 75, 0C, 68, 24, 95, 41, 00, FF, 15, 00, C1...
 
[+]

Entropy:
7.9861

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
106.5 KB (109,056 bytes)

The file mb_driver_lan_atheros_813x_815x.exe has been seen being distributed by the following 24 URLs.

http://www.techspot.com/drivers/downloadnow/.../?evp=c3e319ded6df683df0e6cc6e7a37368f&file=1

http://download810.mediafire.com/2em525te4avg/.../g41mt-s2_driver_lan_atheros_813x_815x.exe

temp:mb_driver_lan_atheros_813x_815x.exe

https://d2.driverscollection.com/11aedfec63d/4b81ceed8cd5490ad080296b655fdf70cbdbd5ddc10ed78ea49060d2f3c11f5195d3a920f6e3c53a2ca51269e079e4ce54df631f/3/76/4/.../mb_driver_lan_atheros_813x_815x.exe

http://pantip.com/.../http:??????download.gigabyte.ru???driver???mb_driver_lan_atheros_813x_815x.exe

http://download1788.mediafire.com/ixaahgn1qvog/.../g41mt-s2_driver_lan_atheros_813x_815x.exe

http://www.techspot.com/drivers/downloadnow/.../?evp=d37f6917f7d3f5cedfd4fbb5e8a4b2b1&file=1

http://download1.gigabyte.ru/.../mb_driver_lan_atheros_813x_815x.exe

http://www.techspot.com/drivers/downloadnow/.../?evp=17d2ef3e8580987b69af76cb1de67a71&file=1

http://www.techspot.com/drivers/downloadnow/.../?evp=bc7692a73ac7bdd63853782c4e4b0ee2&file=1

http://download2028.mediafire.com/jwzg915qd7zg/.../g41mt-s2_driver_lan_atheros_813x_815x.exe

http://www.techspot.com/drivers/downloadnow/.../?evp=b310eb5ff1ecef4471889940fd10807d&file=1

http://download810.mediafire.com/m4hhoxwy52sg/.../g41mt-s2_driver_lan_atheros_813x_815x.exe

http://www.techspot.com/drivers/downloadnow/.../?evp=6619262a543df7d9d72e70e6e51e4e78&file=1

http://download810.mediafire.com/hrn4g9c8gtsg/.../g41mt-s2_driver_lan_atheros_813x_815x.exe

http://download.gigabyte.ru/.../mb_driver_lan_atheros_813x_815x.exe

http://download776.mediafire.com/t4xydkwmkl9g/.../g41mt-s2_driver_lan_atheros_813x_815x.exe

http://download.gigabyte.cn/FileList/.../mb_driver_lan_atheros_813x_815x.exe

http://download672.mediafire.com/7kxc2986m1jg/.../g41mt-s2_driver_lan_atheros_813x_815x.exe

ftp://download.gigabyte.ru/.../mb_driver_lan_atheros_813x_815x.exe

http://eu3-cdn.devid.info/download/.../52472_mb_driver_lan_atheros_813x_815x.exe

http://download.gigabyte.us/FileList/.../mb_driver_lan_atheros_813x_815x.exe

http://download.gigabyte.asia/FileList/.../mb_driver_lan_atheros_813x_815x.exe

http://download.gigabyte.eu/FileList/.../mb_driver_lan_atheros_813x_815x.exe

Scan mb_driver_lan_atheros_813x_815x.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.