downloader_tmp_-1175503882

VIST

The file downloader_tmp_-1175503882 has been detected as malware by 1 anti-virus scanner.
Publisher:
VIST  (signed and verified)

MD5:
0ae5466e246a562293d2c1f5b1788d65

SHA-1:
b80f8ce1ebecce8a6b22e41fe9306b55ea50f543

SHA-256:
a10c4cb65fa27c54d8e04a39c950faf1a4a170bb25103ce830e1a7a0de6761de

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/26/2024 8:31:20 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.1.8.0

File size:
142.9 KB (146,304 bytes)

Common path:
C:\users\{user}\appdata\local\temp\downloader_tmp_-1175503882

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
1/20/2014 2:00:00 AM

Valid to:
1/21/2015 1:59:59 AM

Subject:
CN=VIST, O=VIST, STREET="Chistova, 6A", L=Moscow, S=Moscowskaya oblast, PostalCode=109390, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
204E717AF42FC1AC4E22F179E6AF42F3

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x1000

Entry point:
E9, 6B, 98, 01, 00, 50, E8, AD, 04, 00, 00, 85, FF, 25, 24, F0, 41, 00, B8, 08, 10, 40, 00, C3, 55, 8B, EC, 83, C4, 98, C7, 45, FC, 95, 6A, 01, 00, 8B, 45, FC, 50, E8, 8A, 04, 00, 00, 85, C0, 75, 12, 89, 35, F7, F0, 41, 00, 87, 3D, DE, F0, 41, 00, 89, 1D, 75, F0, 41, 00, 89, CA, C6, 05, D4, F0, 41, 00, 54, 89, 05, 96, F0, 41, 00, 89, D9, BF, FE, 01, 00, 00, C7, 45, F8, 21, BA, 01, 00, C7, 45, F4, 17, A8, 01, 00, 8B, 45, F4, 50, 8B, 45, F8, 50, E8, 53, 04, 00, 00, 85, C0, 74, 24, C7, 05, 03, F1, 41, 00, 9A...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
103 KB (105,472 bytes)

Remove downloader_tmp_-1175503882 - Powered by Reason Core Security