home

realtek-rtl8139-family-pci-fast-ethernet-nic-6.111-win-7-.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from ftp.matcom.com.pl.
MD5:
dc24611c2cdbe23f1812277192256d0d

SHA-1:
4a936d9d7bd4e776ab88a227cbdcc3034db4adb7

SHA-256:
d44a650c7de5f9dea9c396b4ac52b535180da5fe378991b666044cfcb0dc243c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:26:56 AM UTC  (today)

File size:
118 KB (120,860 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\realtek-rtl8139-family-pci-fast-ethernet-nic-6.111-win-7-.exe

File PE Metadata
OS bitness:
Win64

Linker version:
95.87

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:W+ELxObqJtJAG09P0PFFMP3z7WGqOtWgh6V38fiQ9s:3qKqLWGzMP3z7WGq6lhG38e

Entry address:
0x31303230

Entry point:
50, 4B, 03, 04, 0A, 00, 00, 00, 00, 00, F3, 5A, 54, 3D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 1A, 00, 00, 00, 44, 72, 69, 76, 65, 72, 5F, 57, 69, 6E, 37, 5F, 36, 31, 31, 31, 5F, 31, 30, 32, 30, 32, 30, 31, 30, 2F, 50, 4B, 03, 04, 0A, 00, 00, 00, 00, 00, F3, 5A, 54, 3D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 1F, 00, 00, 00, 44, 72, 69, 76, 65, 72, 5F, 57, 69, 6E, 37, 5F, 36, 31, 31, 31, 5F, 31, 30, 32, 30, 32, 30, 31, 30, 2F, 57, 49, 4E, 37, 2F, 50, 4B, 03, 04, 0A, 00, 00, 00, 00, 00, F3...
 
[+]

Code size:
1.5 GB (1,597,468,265 bytes)

The file realtek-rtl8139-family-pci-fast-ethernet-nic-6.111-win-7-.exe has been seen being distributed by the following URL.

http://ftp.matcom.com.pl/pub/.../Driver_Win7_6111_10202010.zip

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.