|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| a-squared | 4.5.0.41 | 2009.10.07 | - |
| AhnLab-V3 | 5.0.0.2 | 2009.10.06 | - |
| AntiVir | 7.9.1.33 | 2009.10.07 | - |
| Antiy-AVL | 2.0.3.7 | 2009.10.05 | - |
| Authentium | 5.1.2.4 | 2009.10.07 | - |
| Avast | 4.8.1351.0 | 2009.10.07 | - |
| AVG | 8.5.0.420 | 2009.10.04 | - |
| BitDefender | 7.2 | 2009.10.07 | - |
| CAT-QuickHeal | 10.00 | 2009.10.07 | - |
| ClamAV | 0.94.1 | 2009.10.07 | - |
| Comodo | 2527 | 2009.10.07 | - |
| DrWeb | 5.0.0.12182 | 2009.10.07 | - |
| eSafe | 7.0.17.0 | 2009.10.06 | - |
| eTrust-Vet | 35.1.7055 | 2009.10.07 | - |
| F-Prot | 4.5.1.85 | 2009.10.07 | - |
| F-Secure | 8.0.14470.0 | 2009.10.07 | - |
| Fortinet | 3.120.0.0 | 2009.10.07 | - |
| GData | 19 | 2009.10.07 | - |
| Ikarus | T3.1.1.72.0 | 2009.10.07 | - |
| Jiangmin | 11.0.800 | 2009.10.07 | - |
| K7AntiVirus | 7.10.863 | 2009.10.06 | - |
| Kaspersky | 7.0.0.125 | 2009.10.07 | - |
| McAfee | 5763 | 2009.10.06 | - |
| McAfee+Artemis | 5763 | 2009.10.06 | Artemis!17622D3C015B |
| McAfee-GW-Edition | 6.8.5 | 2009.10.07 | - |
| Microsoft | 1.5101 | 2009.10.07 | - |
| NOD32 | 4487 | 2009.10.07 | - |
| Norman | 6.01.09 | 2009.10.06 | Hupigon.GPMB |
| nProtect | 2009.1.8.0 | 2009.10.07 | - |
| Panda | 10.0.2.2 | 2009.10.06 | - |
| PCTools | 4.4.2.0 | 2009.10.07 | - |
| Prevx | 3.0 | 2009.10.07 | - |
| Rising | 21.49.22.00 | 2009.09.30 | - |
| Sophos | 4.45.0 | 2009.10.07 | Mal/Behav-034 |
| Sunbelt | 3.2.1858.2 | 2009.10.07 | - |
| Symantec | 1.4.4.12 | 2009.10.07 | - |
| TheHacker | 6.5.0.2.032 | 2009.10.06 | - |
| TrendMicro | 8.950.0.1094 | 2009.10.07 | - |
| VBA32 | 3.12.10.11 | 2009.10.07 | - |
| ViRobot | 2009.10.7.1974 | 2009.10.07 | - |
| VirusBuster | 4.6.5.0 | 2009.10.07 | - |
| Additional information |
|---|
| File size: 2625439 bytes |
| MD5 : 17622d3c015b5cfe0f45516cac62705f |
| SHA1 : d9cc1811ff327dce84f46159a709a337876dd177 |
| SHA256: 6f6d7acd88ab4d3a692f3fb88acf5f1927604d65e4c97645c141c9843e207b23 |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x967C timedatestamp.....: 0x2A425E19 (Sat Jun 20 00:22:17 1992) machinetype.......: 0x14C (Intel I386) ( 8 sections ) name viradd virsiz rawdsiz ntrpy md5 CODE 0x1000 0x8DF0 0x8E00 6.60 d9ecfbf07ab78596addecc7212f5443a DATA 0xA000 0x248 0x400 2.72 cb71d3ba9d38c50e973fcb10be8187d2 BSS 0xB000 0xE64 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .idata 0xC000 0x8C8 0xA00 4.25 07beaac03baa14255d548202c5f668a1 .tls 0xD000 0x8 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .rdata 0xE000 0x18 0x200 0.20 d293bf8d4ebe9826d58e1d27c25fe4b6 .reloc 0xF000 0x86C 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .rsrc 0x10000 0x2800 0x2800 4.29 0af69d4b3e6eff51825797a3d53870d5 ( 5 imports ) > advapi32.dll: RegQueryValueExA, RegOpenKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges > comctl32.dll: InitCommonControls > kernel32.dll: DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, WideCharToMultiByte, TlsSetValue, TlsGetValue, MultiByteToWideChar, GetModuleHandleA, GetLastError, GetCommandLineA, WriteFile, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetSystemTime, GetFileType, ExitProcess, CreateFileA, CloseHandle, WriteFile, VirtualQuery, VirtualProtect, VirtualFree, VirtualAlloc, Sleep, SetLastError, SetFilePointer, SetEndOfFile, RemoveDirectoryA, ReadFile, IsDBCSLeadByte, GetWindowsDirectoryA, GetVersionExA, GetUserDefaultLangID, GetSystemInfo, GetSystemDefaultLCID, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetFullPathNameA, GetFileSize, GetFileAttributesA, GetExitCodeProcess, GetEnvironmentVariableA, GetCurrentProcess, GetCommandLineA, InterlockedExchange, FormatMessageA, DeleteFileA, CreateProcessA, CreateFileA, CreateDirectoryA, CloseHandle > oleaut32.dll: VariantChangeTypeEx, VariantCopyInd, VariantClear, SysStringLen, SysAllocStringLen > user32.dll: MessageBoxA, TranslateMessage, SetWindowLongA, PeekMessageA, MsgWaitForMultipleObjects, MessageBoxA, LoadStringA, ExitWindowsEx, DispatchMessageA, DestroyWindow, CreateWindowExA, CallWindowProcA, CharPrevA ( 0 exports ) |
| TrID : File type identification Inno Setup installer (96.7%) Generic Win/DOS Executable (1.6%) DOS Executable Generic (1.6%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) |
| ThreatExpert: http://www.threatexpert.com/report.aspx?md5=17622d3c015b5cfe0f45516cac62705f |
| ssdeep: 49152:d5BUVkiOSPwXiElBoRKU9lZ20/i2/nToC802zwd+C98wYHmU4TRB2t:Xu6iOCylqlZT/pn0xdC9jrU1 |
| sigcheck: publisher....: __--VIP copyright....: n/a product......: description..: __--VIP __ original name: internal name: file version.: comments.....: This installation was built with Inno Setup: http://www.innosetup.com signers......: - signing date.: - verified.....: Unsigned |
| Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=8B98308C9F5FA3EE0F2628682E63F600B6BC0A02 |
| PEiD : - |
| packers (Kaspersky): UPX |
| RDS : NSRL Reference Data Set - |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.