home

witamina.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s6918.chomikuj.pl and multiple other hosts.
MD5:
84cbf3b38d34adf82ab2f72f80247725

SHA-1:
8869c0d98df70da3a426bd979aad61544d9578dc

SHA-256:
5d92a41635ed9a0e3905ee960bc0e8276ed00ae97acd38eee47301b34c5aea61

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/30/2024 1:01:53 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
Malware.QVM06.Gen
1.0.0.1015

File size:
671.7 KB (687,804 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/9/2012 3:19:49 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:1K2mhAMJ/cPl7p9aWjr0KK0e4gIdWXOvyTpOSNWXt+uN8/KUvuKsQC5sZdfGPuhb:U2O/Gl7pwwAHNzIdWv9OSNzuN8/KUvu4

Entry address:
0xAC87

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, 9F, 30, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, 8F, AB, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 24, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 24, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 0E, B1, FF, FF, C3, 56, 8B, F1, 8B, 06, 85, C0, 74, 07, 50, FF, 15, C4, 40, 41, 00, 83, 26, 00, 83, 66, 08, 00, 83, 66, 0C, 00, 5E, C3, 56, 8B, F1, 80, 7E, 04, 00, 75, 34, 68, F4, 44, 41, 00...
 
[+]

Code size:
73 KB (74,752 bytes)

The file witamina.exe has been seen being distributed by the following 21 URLs.

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1SedDtWxhmjERtspxibGXzMXZqZCsgP45bliNdizgPjryoStEKQWdJHuv_sdid_U0L2sS_IuYumxentxTLAG8JkqYT7gjmpZXANshn3t6yemg&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1RJpyPW1ZNgSwoKvcVXMmWO9Y6giQseKok0QHcyEqDtkQSoJ6oTj51irbo90n8yyBV58dWdoSF1QvvVwwbf7f_IajvXa4yWeXhAgeAwHe7_LQ&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1RisVpBh_KX2t0UcllS90eBk4Ez8zDy-kWAz28a-bqK3rPgZLFVWS1gBOgUautIV7FeFin61gTygb44rQUX2EruKZAg9GWU4Idd3bowC7fDHQ&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DsIjb4wSy9DPgdby9P-IqjF0aM7CN27rbunkZoXBjJDdgwPQh9iMhUJvqgps5MK9zXq7DAcv9iXU2H74buEHSuyNAhoIfUNlsr3QnKRYDa1OzO2GBamEJEcMB2h9wr_CbwQlrXLTWug6S1zF9FdoZPjYxXOxrOCLEJf-f0in4pKU&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1QDr0mvQBCiGyAQ3Zn7qaUFggqepkhNgv5VGn0hLW2cgPWOctRiKxeLqMHFIC2KjxQ7UufBHz1kGnnIxGylHTe5QsDCDkiI0HAN5IXL-e26ZA&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1RCuTmMddmdJM5V-Qhhr9LrLk98vaTDahakjboX-wJs9Yxp_uQLnZ1CkmHixKNlniak5fqhAnZ4itdooGpGQsQrztv3ztANkSZYrN0x9AgTOA&pv=2

http://s5607.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1S8GybPkZJ5xJr1wv_YRw69znaoontMoRQNr5r-dp2_Z4_ly8DfdD3zD8Ej1QPXCdZwXJlOjX88_LIoPMwlrPlzVlBkoVSw6kMshh3NdBRkzg&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1Q-tkGwTVvOJe3770-U4AHHUaKM5K7aqFKo1Dd1H8wtxMawKP8NSsNLKJkVJupgLMa5OdygIxVazQyEeETk4WPLOPZEHziTQEnPXH0Ub4ABIQ&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4Dsf1hQVHdtcA3VuCEktIEmJNqkPvwOiMZsagYQI5OJ0YXPGwVl61u37P8qqsnbNGEYhLQeOoGs7-6z1QpifD7fSRPfNo_MDy2D8QZslW2vyOklOhWuXfaPiQEsnl2YHTKA&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1Sc4-6v4QKKWyhLFo3NFJ6EF4NqKxYrCRYDnrBG4PvGIBJrujK3kO4Kjvb4tzvufQuW1675UpTuXamnZnizbGL6ne2Cj0N1hrjo-DUQO0mAuQ&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1RmcOGRU1OvrYJe0PyoiP2ybsx8vlcuDkaGD-KW2ZeQHsAM8M2vW25V0rA656qILvk5KmUmumaq_s_xasr43QV1vKQ5miZFRyZZtEOOSLe1rg&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1SAg5rqbo6vDod8B3nhunnR9lBKH9MDOswFvQMyHDRN1cSKIa5XYfztb7wkou3a0JgERzDfIuq-MWQJ5yh6lqIqTRb1ZjEsvj1YgVTxK_IS8w&pv=2

http://s5607.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4Dsf1hQVHdtcA3VuCEktIEmIXxpdFeTuC_6w0GwFT8OdmkwFHdeoZIUPMdAfuQxp3pdMyTVn_zXXkO_qCmvEmspxTXfSlOM82LckbppgqQnREphGtBXcesOeHvs_Z5UnHlQ&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1TP3pH4UkBv6miDR0GWSJQN7bX8Sr9-2JnUevaapcRJoOoLUGQcuAlTrhOpHH2GcMdtvRcwyl89kuVPpGkKmhJDTEsLOpnPAE4aNcdpr9g5Jw&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1SMaI-YUdK0fU6K5IcGNo4Q6EVcLcqJhXaHCxUIyGwbty8u6ivgTZfZqscIdomXYkAlIBuvUDE5pQY1CsZ1DyAL76m-SWAGgTNZDN4uISDkRQ&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4Dsf1hQVHdtcA3VuCEktIEmKLiyC5_q5amcEJEuOjH0kvVMuTw4cUuFoDNp94y5QYiqljpth83QX6awr-Zh0ds-ddUQAdRmJNrkbXL-Q_4xhLsKrZ9QpFA24i3bHtxSXV7Q&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1RCyeF9SJ58e2iv_xhmJWnaIScXwiMHoZDSBtIGVGHImAtcxPk3qoND--pe3eDofynLzU0F8PoJve__CmfzHMst8gNLP16fDaHX2yXwKPSgxA&pv=2

http://s5607.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4Dsf1hQVHdtcA3VuCEktIEmJq38oxEIp9rGd7wtR1ydvCXatm6EZNzI3CdOmPnh6-ZmcxZiW-KV5l8ratYVcmVjKGdTze4zFRK0LWDDaBlclg3ojHTgS1AMN-whheu137Mw&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1TO7sXabMpVOYy31rnobGgFxyKNGMbJ9U9Leo2zQCQg24186uF_RzrhLH60Iz63_cNUCX4wfpu9EkJpRZY-PebSWB3RaRSegA2c3yuaglg55A&pv=2

http://s6918.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4Dsf1hQVHdtcA3VuCEktIEmJVFRDpG5Xc7nQzIy-MbaXVT1umE6p_Jctng2jWWa1N901LRpRRLJmWNN-QhJD6AOrmn3w2WMs8EYXYg3xbm9rUNFjrj8it27v-UZMV_mHDyA&pv=2

http://s5607.chomikuj.pl/File.aspx?e=sQPDOWcfh467SYCvBFq4DqtLS8KSNu__ibYfasr8I1Q2rFvvQm5W15ti8wUvT9hIdCRAk9zM5YmpZPgsfuJyx7G_bVEQ31zz06TG7F_MRTzlm96B_QlDMyxcNXXNsuYwr6XBpOcKy70VEeNionNPzQ&pv=2

Scan witamina.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.