home

RIPAds.exe

RIPAds

This is a setup program which is used to install the application. The file has been seen being downloaded from download1980.mediafire.com and multiple other hosts.
Publisher:
RIPAds

Product:
RIPAds

Version:
1.0.0.0

MD5:
5b261094064613aa799f2e370086b8d1

SHA-1:
37c7790cf705450f9cc0ce23ef74132559aa94aa

SHA-256:
6cea61eb83f1d2ef29b50f00bd46ebd1ecbfbbbd1c9f720da4d204cac34be9df

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:15:21 PM UTC  (today)

File size:
755 KB (773,120 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © RIPAds 2014

Original file name:
RIPAds.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
12/23/2014 1:24:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:1LXY/SzD8JS/T3yuyMAL2Xdd/YLXY/SzD8JS/T3ypI:pth/T7y+dsth/TWI

Entry address:
0x62FEE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 7A, E0, 98, 54, 00, 00, 00, 00, 02, 00, 00, 00, 93, 00, 00, 00, 1C, 40, 06, 00, 1C, 14, 06, 00, 52, 53, 44, 53, E2, 6E, FA, CE, 9F, 9B, A5, 4F, 89, 42, 0A, AC, A9, 37, B6, 8F, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 41, 6C, 62, 61, 62, 53, 61, 69, 66, 69, 5C, 64, 6F, 63, 75, 6D, 65, 6E, 74, 73, 5C, 76, 69, 73, 75, 61, 6C, 20, 73, 74, 75, 64, 69, 6F, 20, 32, 30, 31, 30, 5C, 50, 72, 6F, 6A, 65, 63, 74, 73, 5C...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
388 KB (397,312 bytes)

The file RIPAds.exe has been seen being distributed by the following 12 URLs.

http://download1980.mediafire.com/crx2yp0e28ig/.../RIPAds.exe

http://download1980.mediafire.com/9y6dr2pvfmag/.../RIPAds.exe

http://download2060.mediafire.com/c82i2vv85rgg/.../RIPAds.exe

http://download1980.mediafire.com/b7per9fskuhg/.../RIPAds.exe

http://download1921.mediafire.com/c0nyu31zi0dg/.../RIPAds.exe

http://download1678.mediafire.com/h8dc0l18d8dg/.../RIPAds.exe

http://www61.zippyshare.com/d/25438810/.../RIPAds.exe

http://www61.zippyshare.com/d/25438810/.../RIPAds.exe

http://download1980.mediafire.com/75bbw5a3yxcg/.../RIPAds.exe

http://www61.zippyshare.com/d/25438810/.../RIPAds.exe

https://mega.nz/temporary/.../GQpkUQ5Z

http://www61.zippyshare.com/d/25438810/.../RIPAds.exe

Scan RIPAds.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.