home

winfaith1.exe

Faith1)

Buster Ind Com Imp e Exp de Acessorios P Autos Ltda

Publisher:
GBuster  (signed by Buster Ind Com Imp e Exp de Acessorios P Autos Ltda)

Product:
Faith1)

Version:
50.0.9.0

MD5:
c2f312a755329687488a0ab55b207367

SHA-1:
0589486b4cf9e19397cb90eccef9a481bcce4079

SHA-256:
74aed6e9b800e681883aa413c9c49eef0380242220641efb2141ed5f57b1e6c8

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/18/2024 11:11:57 AM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
23.00.65.16110

File size:
8.4 MB (8,828,864 bytes)

Product version:
50.0.9.000

Copyright:
Copyright (C) Microsoft, Co. 2013

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\winfaith1.exe

Digital Signature
Signed by:
Buster Ind Com Imp e Exp de Acessorios P Autos Ltda

Authority:
Thawte, Inc.

Valid from:
3/31/2013 8:00:00 PM

Valid to:
4/1/2014 7:59:59 PM

Subject:
CN=Buster Ind Com Imp e Exp de Acessorios P Autos Ltda, O=Buster Ind Com Imp e Exp de Acessorios P Autos Ltda, L=GOIANIA, S=GOIAS, C=BR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0637EE22B4697200C72E2B2A58DBAE34

File PE Metadata
Compilation timestamp:
1/15/1987 2:52:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.49

CTPH (ssdeep):
196608:CZVSXmDhmleWp8+iyxsHW/MYt8XCGuYe0qmfbLs5Wb:iEe+H7yDPuSqmjLpb

Entry address:
0x1000

Entry point:
EB, 08, D3, 33, 00, 00, 00, 00, 00, 00, 74, 00, 68, E3, 0B, AE, 0B, 50, 90, 53, 56, 5E, 51, 56, 5E, 52, EB, 02, 66, 8C, 56, 7E, 00, 57, 7D, 00, 55, B9, 53, 3C, 00, 00, F7, DB, 01, C6, 81, C1, BE, 16, 00, 00, 0D, 22, 1F, 00, 00, 29, CA, 7E, 00, 11, F2, 81, FB, 1C, 30, 00, 00, 89, CE, 81, E3, 81, 26, 00, 00, 81, EE, 48, 22, 00, 00, F7, C1, 2D, 2A, 00, 00, F7, E0, 39, D1, F7, E8, B9, 00, 00, 00, 00, F3, A4, 0F, A2, 81, F2, D8, 09, 00, 00, 21, C3, 7D, 00, 87, D9, F7, C6, E9, 03, 00, 00, 0F, 31, 4E, F9, 0F, 83...
 
[+]

Code size:
17.9 MB (18,784,256 bytes)

Scan winfaith1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.