home

14-4-win7-win8-win8.1-32-64-sb.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www2.ati.com.
MD5:
e35404e7bf26e1694095db3c8d128e59

SHA-1:
1626cf60b045e079b9952f24a6f70c03fcd59781

SHA-256:
eb96c113a249f822b165dcfc07a686cbc1dfb90b61c8e57d78eb88198b385054

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:03:20 AM UTC  (today)

File size:
2.4 MB (2,503,955 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\14-4-win7-win8-win8.1-32-64-sb.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:oIqnD4gJOSiFoV0yVAcZDpnSFzynlPNoGyYKnzHTyuON1:oIqnE6OSQo0yhZlkGKnzHTyuON1

Entry point:
25, 41, 8A, A7, BC, C7, AC, F2, 82, 23, 12, 38, 20, 8D, 60, E0, E8, D2, 7B, 14, A3, AB, A3, C3, 99, 69, 4B, 17, 57, 55, 69, A2, 80, 41, CA, 77, 9D, 8F, 03, 39, 27, E2, B9, E5, 47, D7, 01, D8, C1, 28, 2F, 7C, 16, 37, 9B, 28, C7, B7, CF, AF, 2E, CB, 3A, 21, D7, 2E, 7C, CD, 5D, 87, 13, AC, E1, C9, BA, D9, F6, 80, B2, 88, AE, 8B, C4, 58, 1A, AC, 68, BB, 8D, 20, 3C, 4B, F4, 35, D1, 5C, 67, 1F, 99, 98, 23, 2C, 3D, 4E, BE, 43, 25, 56, A0, C1, 17, A4, AF, EC, 63, 8E, 1C, 32, 09, 46, 4D, 00, FC, 31, C2, 17, FB, A3...
 
[+]

Entropy:
7.9999  (probably packed)

The file 14-4-win7-win8-win8.1-32-64-sb.exe has been seen being distributed by the following URL.

http://www2.ati.com/.../14-4-win7-win8-win8.1-32-64-sb.exe

Scan 14-4-win7-win8-win8.1-32-64-sb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.