home

nvidia geforce 210 1gb ddr3 driver__3516_i1378983043_il3249771.exe

The executable nvidia geforce 210 1gb ddr3 driver__3516_i1378983043_il3249771.exe has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from www-squid.cluster12.fb-hosting-apps.com.
MD5:
f05de6edbbc518c06f4ec7fd80b20244

SHA-1:
b775579e4ed61be368409846e21950e5f229e858

SHA-256:
555d5fe755703ff17554bb6b39aa2644502bc7354a0cf6770e5d51025faaffb8

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
12/25/2024 4:42:25 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.7.20.5

File size:
214.8 KB (219,950 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\nvidia geforce 210 1gb ddr3 driver__3516_i1378983043_il3249771.exe

File PE Metadata
Compilation timestamp:
10/14/2014 6:21:50 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:q1sa9XGr1UQWtpsPfPOk4V6t3YIWRMlUcIJ3InAaIeYHVqPFTBftbAOQd36tc:q1p92rSVaf8c4RMm8AZJHAPFTBRAZgtc

Entry address:
0x11D8A

Entry point:
E8, E8, 69, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 3D, 9C, 5E, 3A, 00, 00, 75, 18, E8, C7, 5E, 00, 00, 6A, 1E, E8, 11, 5D, 00, 00, 68, FF, 00, 00, 00, E8, 7C, F3, FF, FF, 59, 59, 8B, 45, 08, 85, C0, 75, 01, 40, 50, 6A, 00, FF, 35, 9C, 5E, 3A, 00, FF, 15, EC, A0, 39, 00, 5D, C3, 8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 83, FB, E0, 77, 6F, 56, 57, 83, 3D, 9C, 5E, 3A, 00, 00, 75, 18, E8, 7D, 5E, 00, 00, 6A, 1E, E8, C7, 5C, 00, 00, 68, FF, 00, 00, 00, E8, 32, F3, FF, FF, 59, 59, 85, DB, 74, 04, 8B, C3...
 
[+]

Entropy:
6.5866

Code size:
163 KB (166,912 bytes)

The file nvidia geforce 210 1gb ddr3 driver__3516_i1378983043_il3249771.exe has been seen being distributed by the following URL.

http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=nvidia geforce 210 1gb ddr3 driver_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:32.373789 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=nvidia geforce 210 1gb ddr3 driver&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:32.373789 00:00&parameter=nvidia geforce 210 1gb ddr3 driver&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:32.373789 00:00&parameter=nvidia geforce 210 1gb ddr3 driver&ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:32.373789 00:00

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.