home

VipIpClnt.exe

VipIP.ru: Программа для заработка

ООО

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘VipIpCnt’.
Publisher:
ООО "Иновика"  (signed by ООО )

Product:
VipIP.ru: Программа для заработка

Version:
8.5.2.10

MD5:
c9cdd9099867b1c4606c5a26ef562e22

SHA-1:
22530d72c133630cdb358dbc8255d308098e62b4

SHA-256:
ba8abc7c04df3edb31d0b5da4b470afa8ddbd5e4d8ea9668218e634e62c615a6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:26:53 PM UTC  (today)

File size:
4 MB (4,227,400 bytes)

Product version:
8.5

Copyright:
ООО "Иновика"

Trademarks:
ООО "Иновика"

Original file name:
VipIpClnt.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\vipipclnt\vipipclnt.exe

Digital Signature
Signed by:
ООО

Authority:
StartCom Ltd.

Valid from:
3/4/2016 12:26:06 PM

Valid to:
3/4/2019 12:26:06 PM

Subject:
CN="ООО ""Иновика"" - ""Inovika"" LLC", O="ООО ""Иновика"" - ""Inovika"" LLC", L=Krasnoyarsk, S=Krasnoyarsk Krai, C=RU

Issuer:
CN=StartCom Class 3 Object CA, OU=StartCom Certification Authority, O=StartCom Ltd., C=IL

Serial number:
34497EECD3BE14165B6F2F0B9D15BB69

File PE Metadata
Compilation timestamp:
12/5/2016 7:30:19 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:URb+Xo/VxhOSL7j7dASlgqC8ALR7zx+k88StqsOi0pTqTeHfSP:KbeqLASlgqC8A/+kvht/SP

Entry address:
0x3375E0

Entry point:
55, 8B, EC, B9, 08, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, B8, 8C, 96, 72, 00, E8, 44, 78, CD, FF, 8B, 35, F4, 7E, 74, 00, 33, C0, 55, 68, BF, 79, 73, 00, 64, FF, 30, 64, 89, 20, B2, 01, A1, 48, 44, 73, 00, E8, 34, 05, CD, FF, 8B, D8, B8, 1C, F2, 74, 00, 8B, D3, 85, D2, 74, 03, 83, EA, F8, E8, 0B, 60, CD, FF, 8D, 45, EC, E8, 57, 08, F9, FF, 8B, 55, EC, A1, A4, 72, 74, 00, B9, DC, 79, 73, 00, E8, 2D, 31, CD, FF, 8D, 45, E8, E8, 3D, 08, F9, FF, 8B, 55, E8, A1, 60, 76, 74, 00, B9, F4, 79, 73, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
3.2 MB (3,367,424 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
VipIpCnt

Command:
C:\users\{user}\appdata\roaming\vipipclnt\vipipclnt.exe


Scan VipIpClnt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.