home

updateinstaller.exe

Artem Izmaylov

This is a self-extracting archive and installer. The file has been seen being downloaded from aimp.com.pl and multiple other hosts.
Publisher:
Artem Izmaylov  (signed and verified)

MD5:
b1c12429f334bc93dc7d8c1a29391092

SHA-1:
090cc0e8524d84ec260f6b9acddda26d4bebefda

SHA-256:
7d2767a862ead2ce1ffa965821c461f1514d2ce6c2814e201d27dc2a3e731aa1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 11:53:59 AM UTC  (today)

File size:
9.1 MB (9,559,912 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\aimp3\updateinstaller.exe

Digital Signature
Signed by:
Artem Izmaylov

Authority:
StartCom Ltd.

Valid from:
10/30/2014 11:23:12 PM

Valid to:
10/31/2016 11:48:08 AM

Subject:
E=artem@aimp.ru, CN=Artem Izmaylov, L=Tula, S=Tula Oblast, C=RU, Description=7Yag5makigtQTVBj

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
10AB

File PE Metadata
Compilation timestamp:
12/30/2012 5:49:49 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:aM/D5wXTw125g2YL2tlYvcO7s5VZaOdsIJeEtUK5ua18:acD5Z25mvnpO+IE

Entry address:
0x1382F

Entry point:
55, 8B, EC, 6A, FF, 68, 98, 6E, 41, 00, 68, C0, 39, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, DC, 51, 41, 00, 59, 83, 0D, E4, B9, 41, 00, FF, 83, 0D, E8, B9, 41, 00, FF, FF, 15, E0, 51, 41, 00, 8B, 0D, C4, 99, 41, 00, 89, 08, FF, 15, E4, 51, 41, 00, 8B, 0D, C0, 99, 41, 00, 89, 08, A1, E8, 51, 41, 00, 8B, 00, A3, E0, B9, 41, 00, E8, 1D, 01, 00, 00, 39, 1D, 80, 97, 41, 00, 75, 0C, 68, B8, 39, 41, 00, FF, 15, EC, 51...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
76.5 KB (78,336 bytes)

The file updateinstaller.exe has been seen being distributed by the following 21 URLs.

http://aimp.com.pl/index.php/.../download?func=download&id=774&chk=7ce8bfd1a8194877562c807bc6f27cf4&no_html=1

http://dw.uptodown.com/dl/1444516715/.../aimp-3-60-build-1502-multi-win.exe

http://ftp-stahuj.centrum.cz/dl/b01416982db6dcb2a01d3bf3960811fc/562b7f74/stahuj/download/software/secured/a/aimp-classic/.../aimp_3.60.1502.exe

https://dw.uptodown.com/dwn/s0-vaJD7Rr4EBcAdFYEXMxDd0zme9oImjtzBnu-m9KfyiNlWRQWqafyi-y_Kp0oVi5aIJURQdlaRSt4Z1H6bHKgWr1p71rIg_AsdGouXheRid6MsFIDzAjydgpcjLc5n/N42A3f7R7Z-41wLS787VELxgMZ2yw_k_NMU6VpOE1RBcMx_M6lcfAMLPmJ8m2sdhX0h1dVnQMOo1W27dF4wTn9B533FfoZGE4Sc7_l_9ucQkGmg9MGM2xVAikibhAxpT/manF3oaSl_LGiAqLpeIvAMM5cOSbFijRT6qB8MW41Yx0yCY4mH5FZ7rsQjcT3SnWGbkTW23aJLb8TBmLjvRq3WMLW4H7nYhoySBV5e5XuTjHXPWzPtqHchvTuhxqMNqY/.../

http://filehippo.com/download/file/.../

http://dw.uptodown.com/dl/1448209784/.../aimp-3-60-build-1502-multi-win.exe

http://dw.uptodown.com/dl/1446343557/.../aimp-3-60-build-1502-multi-win.exe

http://filehippo.com/download/file/.../

http://aimp.com.pl/index.php/.../download?func=download&id=774&chk=26763f2fcf640b9a8cb1ca661a44f869&no_html=1

http://dpcdn-s03.pl/.../aimp_3.60.1502.exe

http://files.programki.net/aimp/.../aimp_3.60.1502.exe

http://bp.sftpps.ru/AIMP_Russian_Setup.exe

http://filehippo.com/download/file/.../

http://www.aimp.su/storage/.../aimp_3.60.1502.exe

http://download.id/.../aimp_DOWNLOAD.ID.exe

https://docs.google.com/uc?authuser=0&id=0B5rovoA-boWkUDlDWngyS3pEMDA&export=download

https://downloader-default14e.disk.yandex.net/rdisk/49b7ee80dddb39d6616214368ac93ae351137fd291dadc84365a09a28ad53ad3/5602c4c5/lwwzWNAkTxhN-bMsB9bZRb6xiG_5NrU-ws6BLmz2rmFl73jNE8ejxXd-nH3g0DB-3lBSUgC6jVxONfMCOPMc6A==?uid=0&filename=aimp_3.60.1502.exe&disposition=attachment&hash=z60JIHuRDN9/.../x-msdownload&fsize=9559912&hid=c24c56413cef8bb1740cadeaa2077da6&media_type=executable&tknv=v2&rtoken=876553fcd08c3e4d9acc94b407c85688&force_default=no&ycrid=na-96e13b9c3086fad924fac2767229eae9-downloader5g

http://filehippo.com/download/file/.../

http://dw.uptodown.com/dl/1445687127/.../aimp-3-60-build-1502-multi-win.exe

http://filehippo.com/download/file/.../

http://dl.cdn.chip.de/downloads/.../aimp_3.60.1502.exe

Scan updateinstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.