Antivirus scan for 83eb1c46cd925f00d7ff6a1d2f4b158de9a9d7dca9bea858688d3a608a704c0d at 2013-07-23 18:25:13 UTC

Антивирусен софтуер	Резултат	Версия на обновление
Yandex		20130723
AhnLab-V3		20130723
AntiVir		20130723
Antiy-AVL		20130723
Avast		20130723
AVG		20130723
BitDefender		20130723
ByteHero		20130613
CAT-QuickHeal		20130723
ClamAV		20130723
Commtouch		20130723
Comodo		20130723
DrWeb		20130723
Emsisoft		20130723
eSafe		20130722
ESET-NOD32		20130723
F-Prot		20130723
F-Secure		20130723
Fortinet		20130723
GData		20130723
Ikarus		20130723
Jiangmin		20130723
K7AntiVirus		20130723
K7GW		20130723
Kaspersky		20130723
Kingsoft		20130723
Malwarebytes		20130723
McAfee		20130723
McAfee-GW-Edition		20130723
Microsoft		20130723
eScan		20130723
NANO-Antivirus		20130723
Norman		20130723
nProtect		20130723
Panda		20130723
PCTools		20130723
Rising		20130722
Sophos		20130723
SUPERAntiSpyware		20130723
Symantec		20130723
TheHacker		20130722
TotalDefense		20130723
TrendMicro		20130723
TrendMicro-HouseCall		20130723
VBA32		20130723
VIPRE		20130723
ViRobot		20130723

The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file.

FileVersionInfo properties

Product robux

Version 1.0.0.0

Original name robux.exe

Internal name robux.exe

File version 1.0.0.0

Description robux

PE header basic information

Target machine Intel 386 or later processors and compatible processors

Compilation timestamp 2013-07-23 16:51:51

Entry Point 0x00053DAE

Number of sections 4

PE sections

Name Virtual address Virtual size Raw size Entropy MD5

.text 8192 335284 335360 5.18 40dc4fe8bb364baa07aef806d0e65f02

.sdata 344064 312 512 2.03 8a15fd131f751797063cb1d5d3d255e3

.rsrc 352256 271856 271872 4.33 6b9e1dd339f86f8fe260c61bf149b3ea

.reloc 630784 12 512 0.10 d3093ca8ed4885aa7e1159c6b558fbf7

PE imports

[+] mscoree.dll

Number of PE resources by type

RT_ICON 1

RT_MANIFEST 1

RT_VERSION 1

RT_GROUP_ICON 1

Number of PE resources by language

NEUTRAL 4

PE resources

16d5e324ed4e6d59e74d95e7cef804075337c8fc7c144a6d38e11342e6015185 MS Windows COFF PA-RISC object file

72e301388329ff1fda6f68b7b250a8648897438c27af09da631aa857e374e926 data

c0085eb467d2fc9c9f395047e057183b3cd1503a4087d0db565161c13527a76f data

ddbdb78241baaa55dd2dc817dc3e8d547e7629bee88643cce24520a9aebbd9f0 ASCII text

Compressed bundles

This file was also submitted to VirusTotal in the following compressed file bundles.

0d2997df6d48e77f9dc607b09068ac32ce8c48dcd013cf520ec2e3b2921c8433

File identification

MD5 f27fdb8a63b438a233df7b77759f8ec4

SHA1 2bdbdac4b7c55ee6b5bc074f7059acf645357a88

SHA256 83eb1c46cd925f00d7ff6a1d2f4b158de9a9d7dca9bea858688d3a608a704c0d

ssdeep

6144:HRNQpzcdPdLpLPKze81wzL+hSjYRNQpzcdPdLpLPKze8:vdonWildon

File size 595.0 KB ( 609280 bytes )

File type Win32 EXE

Magic literal

PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly

TrID	Generic CIL Executable (.NET, Mono, etc.) (55.8%) Win64 Executable (generic) (21.0%) Windows Screen Saver (9.9%) Win32 Dynamic Link Library (generic) (5.0%) Win32 Executable (generic) (3.4%)

VirusTotal metadata

First submission 2013-07-23 18:16:15 UTC (преди 3 години, 11 месеци)

Last submission 2013-07-23 18:25:13 UTC (преди 3 години, 11 месеци)

Имена на файла

robux.exe

Advanced heuristic and reputation engines

Symantec reputation Suspicious.Insight

Не сте влезли в акаунта си. Само регистрирани потребители могат да коментират. Влезте и оставете своя коментар!

Вход Присъединете се към общността

SHA256:	83eb1c46cd925f00d7ff6a1d2f4b158de9a9d7dca9bea858688d3a608a704c0d
Име на файла:	robux.exe
Съотношение на разпознаване:	0 / 47
Дата на анализиране:	2013-07-23 18:25:13 UTC (преди 3 години, 11 месеци)

Ciphered bundle