home

winfaith3.exe

WinWizard(3)

Buster Ind Com Imp e Exp de Acessorios P Autos Ltda

Publisher:
Buster Ind Com Imp e Exp de Acessorios P Autos Ltda  (signed and verified)

Product:
WinWizard(3)

Version:
50.0.8.0

MD5:
5e51b483ee45ee0bd1a8f277205b38e7

SHA-1:
fcea590a2b344150582d5975a8788e16957579c0

SHA-256:
5718e74a02134410fc7f746e611bc032adb3d0fb671fb93fd2a6c4e8aaba2048

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/20/2024 4:11:30 AM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.Packed!1.9C4E
23.00.65.16110

File size:
11.2 MB (11,768,136 bytes)

Product version:
50.0.8.000

Copyright:
Copyright (C) Microsoft, Co. 2012

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\winfaith3.exe

Digital Signature
Signed by:
Buster Ind Com Imp e Exp de Acessorios P Autos Ltda

Authority:
Thawte, Inc.

Valid from:
3/31/2013 8:00:00 PM

Valid to:
4/1/2014 7:59:59 PM

Subject:
CN=Buster Ind Com Imp e Exp de Acessorios P Autos Ltda, O=Buster Ind Com Imp e Exp de Acessorios P Autos Ltda, L=GOIANIA, S=GOIAS, C=BR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0637EE22B4697200C72E2B2A58DBAE34

File PE Metadata
Compilation timestamp:
3/15/2002 11:02:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.53

CTPH (ssdeep):
196608:TDeZMwaeZpZ9U33ZlBPnH2Zia8trCX33Hmc79Mae0wfHBqhfJ05ieoPn4xmaPi+I:TDnerZmHBPnH20EXmc9Mb0sHUhfJ036F

Entry address:
0x1000

Entry point:
EB, 08, 49, 36, 00, 00, 00, 00, 00, 00, 7E, 00, 9C, C7, 04, 24, 70, 4D, 99, 6B, 50, 73, 00, 53, 73, 00, 51, 53, 5B, 52, 74, 00, 56, EB, 02, EE, 2A, 57, D9, D0, 55, 75, 00, B9, 00, 00, 00, 00, F3, A5, 29, C3, 81, E6, 34, 18, 00, 00, B9, 59, 22, 00, 00, 21, D8, 9C, 59, F7, C3, CB, 23, 00, 00, 85, C6, 09, CB, 9F, 43, 81, FE, BB, 25, 00, 00, F7, D1, 89, C6, 81, CA, A4, 03, 00, 00, 87, DA, 39, DE, 11, CB, 81, C6, D9, 27, 00, 00, C1, EB, 30, 7C, 00, 81, E9, 28, 2C, 00, 00, 35, F0, 27, 00, 00, 01, F2, 0F, BC, DA...
 
[+]

Code size:
21.1 MB (22,081,536 bytes)

Scan winfaith3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.