× Cookies sind ausgeschaltet! Diese Seite erfordert aktivierte Cookies, um vollständig zu funktionieren.
SHA256: f198af560b07722fd5e22c7cfe1deff67fc8a8dd12e0652328a08da8a538f40d
Dateiname: LogonScreenChanger.exe
Erkennungsrate: 0 / 55
Analyse-Datum: 2015-04-29 08:50:13 UTC ( vor 3 Jahre, 11 Monate )
Antivirus Ergebnis Aktualisierung
Ad-Aware 20150429
AegisLab 20150429
Yandex 20150428
AhnLab-V3 20150429
Alibaba 20150429
ALYac 20150513
Antiy-AVL 20150429
Avast 20150429
AVG 20150429
AVware 20150429
Baidu-International 20150426
BitDefender 20150429
Bkav 20150425
ByteHero 20150429
CAT-QuickHeal 20150429
ClamAV 20150429
CMC 20150423
Comodo 20150429
Cyren 20150429
DrWeb 20150429
Emsisoft 20150429
ESET-NOD32 20150429
F-Prot 20150429
F-Secure 20150429
Fortinet 20150429
GData 20150429
Ikarus 20150429
Jiangmin 20150428
K7AntiVirus 20150429
K7GW 20150429
Kaspersky 20150429
Kingsoft 20150429
McAfee 20150429
McAfee-GW-Edition 20150428
Microsoft 20150513
eScan 20150429
NANO-Antivirus 20150429
Norman 20150428
nProtect 20150429
Panda 20150428
Qihoo-360 20150429
Rising 20150428
Sophos AV 20150429
SUPERAntiSpyware 20150429
Symantec 20150429
Tencent 20150429
TheHacker 20150429
TotalDefense 20150428
TrendMicro 20150429
TrendMicro-HouseCall 20150429
VBA32 20150428
VIPRE 20150429
ViRobot 20150429
Zillya 20150429
Zoner 20150429
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright © 2012 PB-Software.de.vu

Publisher PB-Software.de.vu
Product LogonScreen Changer
Original name LogonScreenChanger.exe
Internal name LogonScreenChanger.exe
File version 1.0.0.0
Description LogonScreen Changer
Comments Windows 7 LogonScreen Changer
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2012-12-27 19:59:37
Entry Point 0x0002FF8E
Number of sections 3
PE sections
PE imports
_CorExeMain
Number of PE resources by type
RT_ICON 9
RT_MANIFEST 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
NEUTRAL 12
PE resources
ExifTool file metadata
LegalTrademarks
PB-Software.de.vu

SubsystemVersion
4.0

Comments
Windows 7 LogonScreen Changer

LinkerVersion
8.0

ImageVersion
0.0

FileSubtype
0

FileVersionNumber
1.0.0.0

LanguageCode
Neutral

FileFlagsMask
0x003f

FileDescription
LogonScreen Changer

CharacterSet
Unicode

InitializedDataSize
168960

FileOS
Win32

EntryPoint
0x2ff8e

MIMEType
application/octet-stream

LegalCopyright
Copyright 2012 PB-Software.de.vu

FileVersion
1.0.0.0

TimeStamp
2012:12:27 20:59:37+01:00

FileType
Win32 EXE

PEType
PE32

InternalName
LogonScreenChanger.exe

ProductVersion
1.0.0.0

UninitializedDataSize
0

OSVersion
4.0

OriginalFilename
LogonScreenChanger.exe

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CompanyName
PB-Software.de.vu

CodeSize
188416

ProductName
LogonScreen Changer

ProductVersionNumber
1.0.0.0

FileTypeExtension
exe

ObjectFileType
Executable application

AssemblyVersion
1.0.0.0

File identification
MD5 e2d659bd5672e50304a79b2606240caf
SHA1 80cc49e975d0736028fe5bf0a817b3572ad8ac65
SHA256 f198af560b07722fd5e22c7cfe1deff67fc8a8dd12e0652328a08da8a538f40d
ssdeep
1536:UwegFSwdycUEE+s0ZMhBjjjjj8WmTsWIOgFSwdycUEE+s:UweWBocTUmTsWIOWBoc

authentihash e45948be7ffd56c0bf85e552f11a3811b5a947fecbdcce08c3d1cdc44981aa3c
imphash f34d5f2d4577ed6d9ceec516c1f5a744
File size 349.5 KB ( 357888 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly

TrID Generic CIL Executable (.NET, Mono, etc.) (82.9%)
Win32 Dynamic Link Library (generic) (7.4%)
Win32 Executable (generic) (5.1%)
Generic Win/DOS Executable (2.2%)
DOS Executable Generic (2.2%)
Tags
peexe assembly

VirusTotal metadata
First submission 2012-12-27 22:34:28 UTC ( vor 6 Jahre, 2 Monate )
Last submission 2015-04-29 08:50:13 UTC ( vor 3 Jahre, 11 Monate )
Dateinamen LogonScreenChanger.exe
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight
Keine Kommentare. Bisher hat kein Mitglied der VirusTotal-Community einen Kommentar zu diesem Punkt verfasst, seien Sie der Erste!

Hinterlassen Sie Ihren Kommentar...

?
Kommentar abschicken

Sie sind nicht angemeldet. Nur registrierte Nutzer können Kommentare hinterlassen, melden Sie sich an und sagen Sie etwas dazu!

Keine Bewertungen. Niemand hat diesen Punkt bisher bewertet, seien Sie der Erste!