home

13-12_win7_win8_32_dd_ccc_whql.exe

CATALYST 13-12

ATI Technologies ULC

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from d2.driverscollection.com and multiple other hosts.
Publisher:
Advanced Micro Devices, Inc.  (signed by ATI Technologies ULC)

Product:
CATALYST 13-12

Description:
13-12_win7_win8_32_dd_ccc_whql

Version:
0309

MD5:
bbf253a4a2375970981581f808bf8f0e

SHA-1:
5c4868548f774147e8bbf4ae637a5720475eb1f6

SHA-256:
3a61af91c3465ddb18dd47c96d678ec779218cc6e108dc6916ba0c1573325f25

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:20:51 AM UTC  (today)

File size:
152.1 MB (159,504,392 bytes)

Copyright:
Advanced Micro Devices, Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\13-12_win7_win8_32_dd_ccc_whql.exe

Digital Signature
Signed by:
ATI Technologies ULC

Authority:
VeriSign, Inc.

Valid from:
12/13/2011 1:00:00 AM

Valid to:
1/9/2015 12:59:59 AM

Subject:
CN=ATI Technologies ULC, OU=Product Deployment, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ATI Technologies ULC, L=Markham, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
67E18A6937AE14C8BBB829BE916650FF

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:mifXB1m4YrNMk21XkSjobmsUQC0mjN6Qbshxd3gjxwu7mCQpo/jkZtFxA1:bo4YtDS86RQCoYshx1gNzP27ZxA1

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file 13-12_win7_win8_32_dd_ccc_whql.exe has been seen being distributed by the following 50 URLs.

https://d2.driverscollection.com/1b015b14a6dbe72/b4ee7e8fd24cbf1bba3ef8f878f225b0dc94d2ad5a237268b6edfe6221c5293e7741ff761776981f944bae2aa128ab22587b9d98/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

http://d2.driverscollection.com/1247ac9636795f66/04050fcfce263be330a237811a04fae969ce056e589752f8f9138a4a1acb9c54371e1f0d9c2dbe5d8d109fd4505be2c6540b2c34/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1247ac96a8ad2685/5b44a7e9ea476f72c8ad0715bccb313394c875fe7331cd1c933c3a9c0a77d86a5daf5f6d59ec5f2355e8da79ab9c088b587577fd/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1b015b54273f9c4/00f590190bd74d7ba7e8647e258eb3b73cea40dc01cd504caf01feb6435a0a98490f0661671299477fbbd883f9420d3c5829846c/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/6e85332fb0b9/cf4c5a60dbdb297942270ef16e4c0726e70736a47004e7b0f1ed4b154affea575525ec58d1d5a50de3626306dfd305c257e75138/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

http://d2.driverscollection.com/6e854bc7b5f1/05e9437e423dbb5e4a098b7a4a0d5be9c0ba2daa1486b68f5690e41215baf1a2594c585fc29063492f7e06e18d00b6cd5399da8f/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/4adfee3745a77/79dd1c7f86c4927ef7deeb0218f722a93ca8118291e812a8a642ddaf199486601460cd7a7a29f7cee0e21b3b07cb5d12586bfd72/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/11ab285dfaf/bfb99f03191ef1810a7ab43cc94c21112b74c67a4ce402a9471119a324fc46f51ff02daf3e05e4c393cda9a3b62f251f5839663e/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driver.ru/45137460dc899/35e8cc19af323f86c3e2c16fd78aa8f371126fd73bf241fb2bae21c689c32a2eefc4b1d9f03efc4d46b82c6345ecb5545856c359/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/4522036f4986a/7ce19f7b200bb612ab642b42e0b0bf9a871592e6328f503aeb36f26022e023dfdb15b5a3f23e422388b4e84638e4663957fba724/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/4ad11d62dc71c/b1c3358420fa49b245b0d9adb8876428e15f0c4fb820996b51a3ef73b38b2fddb150945ebab6527d4a090088c9a2386f568e4b3b/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1d3f79191dc7d38/683d72ec348e4c518b00a05c2e99135c4c9b68d4a1831535c4a586d6161660a0ced1fbc9257e9dcb3e117047bcc3a59457eabe65/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/655592d760d4/2978266032ba51a98361a51be1bcd42024c395b6aa87139d5442fa9cf1dff6e30dac299d116d6b21ab00595da0d9ffde5526d1b7/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/2ecbf4fd630983/a977a63cd3f398f50b390a547251ce63e7b06b9f453475787f2407b922834226a3174e42bd8252a6ddf37ece83902f2e562e742f/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/_7_141921421922422923424059800b8401c8b548dce3ff5ca1aeb/9194434027ebbd8d27a490909543927a27fa470921260a6119203ed7fbb470d0edc117735b1e416b8f26c661b676fb88584d9893/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1d3f78fd343c8b5/8d96d6664a467ac244c2401ae65248fde629e4267e0a7b15434cce0b8ab105962c1f9584b91ed88c5b296edd83463f6c57d32001/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1247ac96ed1af13d/0ead305899567a6fc2f561fc3b9d59d78879b1f3c35943d0cd53c889856167da0a982098062cf9dfc60ed95fda5baffa565bffc0/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1247ac97256e834b/508418cc738b4c09b14c2c55271499707c0abce07c3ee6d386322f7c2bda7b48366355546b1d1f5d5aa7bdaacfda7ec755cb31fa/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/b0d555c7c18/d4f5a03a745adb250767d24d6422ab4666c925dc1a98f8e63974c8f0dc670ce97fd04b91699d3a19ae3b137b7ac64376572f9541/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1b015bbff4b9fc8/c4e043882a58c4967ec5c93fce307cc0017490b559f67c6946aebbf4d7c3f95f635d5007bd00aa839645ff124930ec8f57b248de/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/_7_141821221722222723228047f72805890c0ab50e87dd570fd/d1f882995c442b861cb80a8dceaf4aa477543a1dd2c7e151e425a566e42ae3a1d981142313db50237ed359c2b51f84025835db59/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://www2.ati.com/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/452231edbb775/148f3f32ff932a2e613d56c1c3ebcacc5121439106ee07c86c8c18b15b4c9bef5b3aa67e98259b3787589300f12574495453bb79/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1d3f7a71bb97ffe/d2133dcaad9b5f7f3743e832a44d435469e33e331b725d3bbe3eb2a3903e8af29b5fc0999613bcc9aa17d81e4b67d8f657e7caa8/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/4ad11c84ec866/57b8facf17ea48d519723baef1418fdd5d6f0fc0a9924aa4741b84be3c822c8288e7e2163a06ac6a7e7341df907ab05c5761d7cf/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/b0d57e0d08d/93d63a6582df0d135fb5e976b27ef03c5e8b67a4c2041e36f4945d8551d8563a2258863f58172d944c17fa242207d9b356e29996/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1d39c9e4976132c/d3ab3f469ef0de5b0f26506db924a00e50b6cd7fdd80088422e1c13016694f3cf32c510280899e052c4de3eae74f6dd058304b55/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/1d3f7a9b154a3a2/afb7a2ad5f6c93c54ce7e8f6e9612ad4de4d563da85c73bfbb0371d9813a20a163e8de044d6711b9af96f111aab77ad1572b7551/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/6e856eb5de56/1caaa1279b8f9bad5638ffadf2c5b96f47fc29618736e7138ee4cbfc8593da95702db699800693500ed39b55a90e7c74583c4f55/3/15/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

https://d2.driverscollection.com/4ac28fa8f5418/73e0f9a0f7bdb6bbc910e86c6960d90a2c593b4cfbb9288d665d16d631969be102833d82b412a285f438184f6a5425325801135a/3/21/1/.../13-12_win7_win8_32_dd_ccc_whql.exe

Latest 30 of 68 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.