home

aimp3.exe

AIMP3

Artem Izmaylov

Publisher:
AIMP DevTeam  (signed by Artem Izmaylov)

Product:
AIMP3

Version:
3.5.0.1224

MD5:
4ad10de832447647d983a9650272d2bd

SHA-1:
30592bda2841be21490dd2f248be4b906a1d5285

SHA-256:
76a87db2384eed481325d0888aef9d57af63812a8701dab12da6d746009ec8e0

Scanner detections:
16 / 68

Status:
Clean  (16 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/24/2024 12:24:40 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Win32.Worm.Mabezat.Gen
355

Avira AntiVirus
W32/Mabezat
7.11.30.172

avast!
Win32:Mabezat [Wrm]
2014.9-160214

AVG
Win32/Mabezat
2017.0.2833

Clam AntiVirus
W32.Mabezat-1
0.98/21324

Dr.Web
Win32.HLLW.Tazebama
9.0.1.045

Emsisoft Anti-Malware
Win32.Worm.Mabezat.Gen
8.16.02.14.11

ESET NOD32
Win32/Mabezat.A virus
10.7.0.302.0

F-Prot
W32/Mabezat.A-1
v6.4.6.5.141

F-Secure
Win32.Worm.Mabezat.Gen
11.2016-14-02_1

Kaspersky
Worm.Win32.Mabezat
14.0.0.660

McAfee
Virus.W32/Mabezat.a
5600.6489

Microsoft Security Essentials
Threat.Undefined
1.213.4955.0

Norman
Win32.Worm.Mabezat.Gen
11.20160214

Sophos
Virus 'W32/Mabezat-B'
5.22

VIPRE Antivirus
Threat.303962
46444

File size:
1.7 MB (1,732,040 bytes)

Copyright:
Artem Izmaylov

File type:
Executable application (Win32 EXE)

Language:
Russian (Russia)

Digital Signature
Signed by:
Artem Izmaylov

Authority:
StartCom Ltd.

Valid from:
11/6/2012 7:28:30 PM

Valid to:
11/8/2014 1:36:54 AM

Subject:
E=artem@aimp.ru, CN=Artem Izmaylov, L=Tula, S=Tula Oblast, C=RU, Description=N0TtN9z9A3cgEBOy

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
07ED

File PE Metadata
Compilation timestamp:
1/31/2013 7:55:16 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:bcv5X5i+WW3TUFh8JBvKYO/sCmZ52kGwAsq1nDJau1IoB:ov7i+WF0KXsCmZ5vq1nUuF

Entry address:
0xAAAC8

Entry point:
55, 8B, EC, 83, C4, F0, B8, DC, 75, 4A, 00, E8, B8, 69, F5, FF, E8, CF, C9, FF, FF, 84, C0, 75, 37, E8, 0A, 58, F6, FF, A1, 34, 50, 4B, 00, C6, 00, 01, E8, 5D, 65, F5, FF, A1, 14, 6A, 4B, 00, E8, 77, 67, F6, FF, E8, 4E, CA, FF, FF, A1, F4, 5D, 4B, 00, 8B, 00, E8, 7E, CE, F5, FF, A1, 14, 6A, 4B, 00, E8, 54, 67, F6, FF, E8, 93, 66, F5, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.8033

Developed / compiled with:
Microsoft Visual C++

Code size:
675.5 KB (691,712 bytes)

Scan aimp3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.