rads_user_kernel.exe

PVP.net Patcher Kernel

This is a setup program which is used to install the application. The file has been seen being downloaded from download1052.mediafire.com and multiple other hosts.
Product:
PVP.net Patcher Kernel

Version:
1.0.0.228

MD5:
5f27f62eabcd11518112ea99de02bef7

SHA-1:
ee12ade7105d91c01711f47b3db7597056accc83

SHA-256:
6b5ddc452ae70fa7dc1eb712e7b4101a3aac10da6c723f6c80a6bf11f698bd6b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 3:46:28 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Cloda48.Trojan
1.3.0.4613

File size:
1.2 MB (1,294,336 bytes)

Product version:
1.0.0.228

Copyright:
Copyright (C) 2011

Original file name:
rads_user_kernel.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
9/6/2011 8:46:04 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:UUpN2XSahR7LqbG5GMm5fO4dFCk/r9kLSbCtQDQiTLTqzKLUQGR:ciahR7v4qk/AQDQqTqS0

Entry address:
0x5A290

Entry point:
E8, 0F, 05, 00, 00, E9, 35, FD, FF, FF, 6A, 14, 68, D0, 09, 50, 00, E8, 62, 02, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, 52, 05, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, 58, 02, 00, 00, C2, 10, 00, 6A, 0C, 68, F0, 09, 50, 00, E8, 04, 02, 00, 00, 83, 65, E4, 00, 8B, 75, 0C, 8B, C6, 0F, AF, 45...
 
[+]

Code size:
856 KB (876,544 bytes)

The file rads_user_kernel.exe has been discovered within the following programs.

League of Legends  by Riot Games
League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.
www.RiotGames.com
12% remove it
About 8% of users remove it
 
Powered by Should I Remove It?

The file rads_user_kernel.exe has been seen being distributed by the following 50 URLs.

http://download1052.mediafire.com/8e9atok12lyg/.../rads_user_kernel.exe

http://download1467.mediafire.com/565hjdbtrhvg/.../rads_user_kernel.exe

http://199.91.153.198/gdm047n322fg/.../rads_user_kernel.exe

http://download2128.mediafire.com/tc55y3wzfy4g/.../rads_user_kernel.exe

http://download1951.mediafire.com/2jaoyjo57iqg/.../rads_user_kernel.exe

http://download1467.mediafire.com/lse7ayiczang/.../rads_user_kernel.exe

http://download1141.mediafire.com/2j7f9ze8vqyg/.../rads_user_kernel.exe

https://fs01n2.sendspace.com/dl/8702fde5c3abf6e9d88eb220d6f54e13/55ec297c524ec4e5/.../rads_user_kernel.exe

http://download1141.mediafire.com/akofvbr1bpjg/.../rads_user_kernel.exe

http://download1245.mediafire.com/r7meza9q3frg/.../rads_user_kernel.exe

http://download1951.mediafire.com/ojh60ps1d1eg/.../rads_user_kernel.exe

http://download1999.mediafire.com/35cyelnvk2og/.../rads_user_kernel.exe

http://download1264.mediafire.com/uu8relp7lyhg/.../rads_user_kernel.exe

http://download1467.mediafire.com/5vrnybfuzbkg/.../rads_user_kernel.exe

http://download641.mediafire.com/gbwzllxue3ig/.../rads_user_kernel.exe

http://download2128.mediafire.com/1fkhk4q1j3bg/.../rads_user_kernel.exe

http://download2129.mediafire.com/iubvnk71suxg/.../rads_user_kernel.exe

http://download1467.mediafire.com/4ivokjk7qxgg/.../rads_user_kernel.exe

http://download986.mediafire.com/3v9llvwrkjhg/.../rads_user_kernel.exe

http://download2032.mediafire.com/k4ks9qw8nrdg/.../rads_user_kernel.exe

http://download1467.mediafire.com/zkzh7a93bs4g/.../rads_user_kernel.exe

http://download2111.mediafire.com/qtp18dw1j5tg/.../rads_user_kernel.exe

http://download661.mediafire.com/4acfdkacju4g/.../rads_user_kernel.exe

http://download1467.mediafire.com/cslqirg3rzjg/.../rads_user_kernel.exe

http://download1372.mediafire.com/mutbh6xtbbpg/.../rads_user_kernel.exe

http://download1951.mediafire.com/o4ohospx6acg/.../rads_user_kernel.exe

http://download1141.mediafire.com/312fiia80jtg/.../rads_user_kernel.exe

http://download1141.mediafire.com/67a2y1kfk2ig/.../rads_user_kernel.exe

http://download661.mediafire.com/z8sdlqhkqdgg/.../rads_user_kernel.exe

http://l.facebook.com/l.php?u=http://l3cdn.riotgames.com/releases/live/.../rads_user_kernel.exe&h=qAQEFsSVE

Latest 30 of 147 download URLs

Scan rads_user_kernel.exe - Powered by Reason Core Security