home

vag-com 409.1 release.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s6080.chomikuj.pl and multiple other hosts.
MD5:
d20926227aad4411d4cac4de1d4c2994

SHA-1:
ed0b9a1730ac49e21f4564a73ebbc6ef92ec5725

SHA-256:
6d590101189db96f234a09293aa26bba1b2e9ca3a785192f765ebdfcb9fc4502

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 5:44:35 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
23.00.65.14913

File size:
1.1 MB (1,166,453 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
9/1/2004 6:16:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:hcPBUjD1TdodWurMDZoPY/4m65ESIvjtRkDSz5TWDXNTiMTgemDCU+X:DjFWvrMDZogwm65EJvZdQzdTOJO

Entry address:
0x21BD0

Entry point:
60, BE, 00, 70, 41, 00, 8D, BE, 00, A0, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA

Code size:
44 KB (45,056 bytes)

The file vag-com 409.1 release.exe has been seen being distributed by the following 18 URLs.

http://s6080.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9Oahoe4IZ5Ycp6pDdiDPCgN3jSjThmDfVEr3X8W2EIG8Yho0eruxEJEmixFtjOY__WGh1YS47Y7YSbqG4QjZb39hmbz8n9TEEFlrNv7yksrZG-OcpkV3KEKEvI4PhtA4KZclgw&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahocYORGWhaWgctiY-aK7_kCvfF7rxwqwminZzOWp2-Y-kjLSrbIe1Q-jDDdJp5T6p6vryD9MWkAN2DDTAf_NAdoNV2yfaOijUJCeZRaQecaf2U4dzG0xNAFPfxCpWhR-jHg&pv=2

http://s144.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahoWa2PdSAweonv52LIcfF3Ova_WoMYW0dknCBg0IlGcfutyVYjjRo4LCV5zRzuu12QoQ_KCjHq3D-d8CAobfCL9cyt28aTkFtZ5r0dgw6ld1jKjPROGMUKppB88p6Vo0BvQ&pv=2

http://s6080.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahocYORGWhaWgctiY-aK7_kCsM-LC7RzuMDOmkN1GfnNu5P1LCyMatXsCf8KSDKvUr4c9CENhgm1UwagxfA9qzOjPBGqCysK8dGaZKDyeiqc4wBpH9JG03QPpFfB8KE0yX3A&pv=2

http://s6080.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahofuRib_GrCVylGASfazKUPstXXasi7f5lYigrPb6EErk4OmS2dMzFGMWbbo8XeeRvogedINTNdfHMflYPWfV9k61Xo75ncnBuKShg_O6HYZtGYndoDYOnOEbwA8pnIRSJw&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahoSSWpQCGMJ-qy-6QtrSTIZUeg8oIYjSYz6dgPlkwFWtepHjCD27aVHyQTrw5H-XFzyUQdqy6AZ9s4N577qq6xlDoaCM5_VWAys2muVbktFcXXDuURddq0hmIzBJv4HcIWw&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahoeDbN0ROSDlLVOca_xTdZlbcHm1yN6pzSgZCmY-1RTHfU3Px1fstDGfYHyXJgi6NDuB4gvm1CN0rZL0KZM-AWKDR_fg9y6ZtfHB0NlYI7M2oNdF2H12cepwQbZRD-MmHC86hveVpDrZj4U4pgdbJOVI&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahocYORGWhaWgctiY-aK7_kCty_k6294ffSGeKIJDRY_fbKR_zWxAtRlyDOlc6bCa48-70F_ZBIP2mCvSI4fmYMAH9xrVDdVjiREZQn-tYZHQqVcm_FfnJsRB0CENHVqAVsS6O013z-9wDM1d2wZOg6P8&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahoeDbN0ROSDlLVOca_xTdZlakHflpQqKFt8Hz-xV373j6SiEuVWEblr8jozRlCNIrYGMXmK4e0QSNJY5ku1dA4Txqbzkjm8J_48cTMiFr9Z4ODp90FUFMibvZ7BmswZxWCg&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahoTXK86ZjkZ2rw2jWNyx7FHcwcUgdcMFF0tt1t2QdIIyh76sIUcIx-MY_Ezi9heouzRwy6iFYhiVzUhhwMmz_UEknTNS-sMRkpAvX2ANU4RpfuYveJBVtcKvv8pE0Cew1e9DpMLR6At8-QMT3KHp4kaA&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahoZX9RiQPuwQJO0ns1rvb_GgexiHtMj_umfRee7bG41boe8Fe_TIEXVxs1Y6V3Jer-MJH-mQgxDVMClafG7hnhAAmKmFUABuCAHjIWNDvSvfijaPvUPs9lzAs6-Wgh95rwA&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahofuRib_GrCVylGASfazKUPvuMF7YwIa8-mw5Pn-NhTlAsZ9_xKgtFIliSc--LJgMpgaJG91y36Ub-DazO2VvibBHWLdCNbooremrDx6ZNjXWg4WaAc4ijCbEgS6oZmOeWcmHxy3dtHwcypWLU8-n95o&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahocYORGWhaWgctiY-aK7_kCuLdWC8OhvA_6lorEF_AhyqnwUl38i13af6W_x6CJ6s7GWNvxKPyVnqPSBZDeLbbjvkIVmfnDPYMj40QGuK-XKt8_eUEf6SbSqYf5pXcgnBJwNPhy62QMPDt1R0FqbjpRs&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahocYORGWhaWgctiY-aK7_kCs-fGwMU2NO7_f78HkEPBlvm4phzXWmbb2bYBxZzwI4PRyR6S_DeG0KLzaW9hBdMz5Kv83mluS7xyxsDaCaGxut9FfR4EJA0Im91S4ripJioQ&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahoaJxTHVZiTLlf38HCfMuVWdo5ZYMhmcV5o9LdD7C4pM5uk_kBPMKnUq9eRGmHIfToyzAapbeJk1bs9dEKeN8tZlkCDNdUX2xPINdRnc7ioQseE2-QrHK9FNrHLAVV50viw&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahoQBnR4lSYpR4TQdhaZ1lQgM5D_G4pDz84mhmB0cuf17X1hK0UQJDmyr3jC9jhHoyXq4i6bQVvtseG_VE0yRC4i8FZhxU7HBhpqj4Gi46wO2zgI_k5eiR4rk17UIsCzFLXQ&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahoQQHm65D9supX90CrRjFcpE5R6DSKQDg7AIoqjA0_LdUKFwu1jjWePbZqF5v67GUU6t_auzM9oI0LYBje5zqFe2WQoTFY_wdCfuUiG8upUMXktXp9RbxT6O6_iZRL_2J3g&pv=2

http://s10567.chomikuj.pl/File.aspx?e=AixNMwNGDKFLn7_E9OahocYORGWhaWgctiY-aK7_kCtZDwx35ADpLcRP5fyzKlq_H23nfOMp9lbCH8ptaYEl-bXs4wvg94IbwfsmfCxaFUqb8bXte_fu3SRTAhOXIjm1xZqRvrpFx597_joCWZxSQYBQKns2BmfxC2MPAKM-jsg&pv=2

Scan vag-com 409.1 release.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.