home

arkadij kobyakov - veterok iplayer fm.exe

Installer Plugin

Krund

The application arkadij kobyakov - veterok iplayer fm.exe by Krund has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software.
Publisher:
Alexander Roshal  (signed by Krund)

Product:
Installer Plugin

Version:
3.92.0

MD5:
8f7edfa0c2f28bd211c9ae9475446d4e

SHA-1:
f8d5770209882c4cb63d5685554edc280f772ae9

SHA-256:
b71bea868a83f0688eed7cdc1de28c0224e55c490a922c0b22fcbf0053aca277

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/23/2024 2:01:10 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Krund.Installer (M)
16.2.13.14

File size:
503.4 KB (515,464 bytes)

Copyright:
Copyright © Alexander Roshal 1993-2010

Original file name:
Installer Plugin.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Krund

Authority:
COMODO CA Limited

Valid from:
12/11/2013 3:00:00 AM

Valid to:
12/12/2014 2:59:59 AM

Subject:
CN=Krund, O=Krund, STREET=66a ul.Nakhimova, L=Bor, S=Nijegorodskaya obl, PostalCode=606440, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0776444138B82422DF336D2BF7FD2968

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:/3csQU62FaMmJUOFTSrxoyb24TRnBoo3nDvSe/voRUpkA0qgwXQzdCQFZUeUpxWd:/3FQugMmJXTFCR51oUpn0vwYrUeUpxWd

Entry address:
0x1BF8

Entry point:
83, 3D, 78, C0, 46, 00, F7, 75, 2A, 84, C0, 75, 10, 87, 05, 21, C0, 46, 00, C7, 05, 93, C0, 46, 00, 46, 02, 01, 00, 89, 0D, F7, C0, 46, 00, 89, 15, 35, C0, 46, 00, 8B, 7C, 24, 24, 89, 05, B8, C0, 46, 00, BE, A4, 10, 40, 00, 89, 35, 10, F0, 46, 00, E9, 0D, F6, FF, FF, FE, 0D, B2, C0, 46, 00, 38, 25, 49, C0, 46, 00, 7E, 0A, C7, 05, 7F, C0, 46, 00, 05, 7A, 01, 00, 89, 05, 38, C0, 46, 00, 89, 15, 16, C0, 46, 00, 87, 35, AA, C0, 46, 00, BF, 9D, 00, 00, 00, C7, 05, 39, C0, 46, 00, 2F, 23, 01, 00, C3, 8D, 40, 00...
 
[+]

Code size:
428 KB (438,272 bytes)

Remove arkadij kobyakov - veterok iplayer fm.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.