home

00000000

Catalyst 13.12 WHQL UnifL Revision 1.2

Karl Sabo

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from mega.nz and multiple other hosts.
Publisher:
leshcat   (signed by Karl Sabo)

Product:
Catalyst 13.12 WHQL UnifL Revision 1.2

Description:
Catalyst 13.12 WHQL UnifL Revision 1.2 Setup

Version:
22.1

MD5:
bb8330b448d252d8a0828be53cf1ed0e

SHA-1:
4d27df60e3672d82a6c7f08e4ecfd01e45c5c9e2

SHA-256:
859813f375005626e735e875728b29281a37be4f5e7192259ad1fd78a83f68d3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/12/2025 5:21:52 AM UTC  (today)

File size:
365.5 MB (383,276,576 bytes)

Product version:
Version 22 Build 1

Copyright:
leshcat

Installer:
Inno Setup

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\file system\000\t\00\00000000

Digital Signature
Signed by:
Karl Sabo

Authority:
COMODO CA Limited

Valid from:
12/6/2013 2:00:00 AM

Valid to:
12/7/2014 1:59:59 AM

Subject:
CN=Karl Sabo, O=Karl Sabo, STREET=3117 Dyer St, L=Las Cruces, S=New Mexico, PostalCode=88011, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
553A15AE8017CA0CC1E6CFA26B587D81

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6291456:K7uTmB7vrqPnJASgYjgyk8bkjtZMV1BmD0Dqb6DBZrVNyHUQVniOnQSozY1pVoXs:WEJASg9L5jtabmD0DqwfRNuVnijY9oXs

Entry address:
0x9C14

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, D0, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 99, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 28, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 28, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file 00000000 has been seen being distributed by the following 2 URLs.

https://mega.nz/temporary/.../EAYkkaDb

https://mega.co.nz/temporary/.../EAYkkaDb

Scan 00000000 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.