× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 178abda803f0f0a65ff9bc2b34b902a6c65ff54918a1cd2bdd7548bd7dd969a4
File name: 89hg56fd.exe
Detection ratio: 4 / 54
Analysis date: 2016-01-20 10:17:28 UTC ( 3 years ago ) View latest
Antivirus Result Update
Bkav HW32.Packed.3C67 20160119
Kaspersky UDS:DangerousObject.Multi.Generic 20160120
Qihoo-360 HEUR/QVM10.1.Malware.Gen 20160120
Rising PE:Malware.Generic(Thunder)!1.A1C4 [F] 20160120
Ad-Aware 20160120
AegisLab 20160120
Yandex 20160119
AhnLab-V3 20160119
Alibaba 20160120
ALYac 20160120
Antiy-AVL 20160120
Arcabit 20160120
Avast 20160120
AVG 20160120
Avira (no cloud) 20160120
Baidu-International 20160120
BitDefender 20160120
ByteHero 20160120
CAT-QuickHeal 20160119
ClamAV 20160120
CMC 20160111
Comodo 20160120
Cyren 20160120
DrWeb 20160120
Emsisoft 20160120
ESET-NOD32 20160120
F-Prot 20160120
F-Secure 20160120
Fortinet 20160120
GData 20160120
Ikarus 20160120
Jiangmin 20160120
K7AntiVirus 20160120
K7GW 20160120
Malwarebytes 20160120
McAfee 20160120
McAfee-GW-Edition 20160120
Microsoft 20160120
eScan 20160120
NANO-Antivirus 20160120
nProtect 20160120
Panda 20160119
Sophos AV 20160120
SUPERAntiSpyware 20160120
Symantec 20160119
Tencent 20160120
TheHacker 20160119
TrendMicro 20160120
TrendMicro-HouseCall 20160120
VBA32 20160119
VIPRE 20160120
ViRobot 20160120
Zillya 20160120
Zoner 20160120
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
ooVoo LLC Copyright

Product Summarized Apps
Original name Summarized Apps
Description Regards 1600
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2016-01-20 08:57:12
Entry Point 0x0000530F
Number of sections 5
PE sections
PE imports
GetTraceEnableLevel
CreateToolbarEx
ImageList_Create
Ord(17)
ImageList_ReplaceIcon
Ord(6)
GetOpenFileNameA
Polygon
DeleteDC
SelectObject
CreatePen
CreateFontIndirectA
CreateSolidBrush
CreateCompatibleDC
DeleteObject
CreateCompatibleBitmap
GetLastError
QueryPerformanceCounter
IsDebuggerPresent
GetTickCount
GlobalUnlock
LoadLibraryA
GetCurrentProcess
GetCurrentProcessId
UnhandledExceptionFilter
GetProcAddress
InterlockedCompareExchange
ReadFile
InterlockedExchange
SetUnhandledExceptionFilter
WriteFile
GetStartupInfoA
CloseHandle
GetSystemTimeAsFileTime
GlobalLock
LocalFree
TerminateProcess
HeapCreate
Sleep
CreateFileA
GetCurrentThreadId
LocalAlloc
__p__fmode
malloc
log10
wprintf
memset
__dllonexit
_controlfp_s
_invoke_watson
strlen
_cexit
?terminate@@YAXXZ
_lock
__p__commode
_onexit
_amsg_exit
exit
_XcptFilter
pow
_encode_pointer
__setusermatherr
_initterm_e
_crt_debugger_hook
_acmdln
_ismbblead
_unlock
_adjust_fdiv
free
_except_handler4_common
__getmainargs
calloc
_exit
_decode_pointer
memcpy
_configthreadlocale
_initterm
__set_app_type
Ord(11)
OleTranslateColor
OleCreatePictureIndirect
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
InitializeSecurityContextA
QuerySecurityPackageInfoA
UpdateWindow
EnumWindows
KillTimer
DestroyMenu
PostQuitMessage
FindWindowA
DrawFrameControl
LoadBitmapA
SetWindowPos
GetSystemMetrics
GetWindowRect
MoveWindow
MessageBoxA
InvalidateRect
GetDC
InsertMenuItemA
GetCursorPos
SystemParametersInfoA
DestroyIcon
SendMessageA
GetClientRect
GetDlgItem
ScreenToClient
TrackPopupMenuEx
GetWindowLongA
SetTimer
LoadCursorA
LoadIconA
GetMenuItemCount
ShowCursor
IsDlgButtonChecked
SetCursor
PtInRect
CreateStreamOnHGlobal
GetHGlobalFromStream
PdhAddCounterW
PdhCloseQuery
PdhOpenQueryW
PdhCollectQueryData
Ord(120)
PE exports
Number of PE resources by type
RT_STRING 6
PNG 3
RT_BITMAP 3
CSS 2
RT_DIALOG 1
RT_RCDATA 1
RT_MANIFEST 1
RT_VERSION 1
Number of PE resources by language
ENGLISH US 18
PE resources
ExifTool file metadata
CodeSize
29696

SubsystemVersion
5.0

InitializedDataSize
133120

ImageVersion
0.0

ProductName
Summarized Apps

FileVersionNumber
3.4.3.2

UninitializedDataSize
0

LanguageCode
English (U.S.)

FileFlagsMask
0x003f

CharacterSet
Unicode

LinkerVersion
9.0

FileTypeExtension
exe

OriginalFileName
Summarized Apps

MIMEType
application/octet-stream

Subsystem
Windows GUI

TimeStamp
2016:01:20 09:57:12+01:00

FileType
Win32 EXE

PEType
PE32

ProductVersion
3.4.3.2

FileDescription
Regards 1600

OSVersion
5.0

FileOS
Windows NT 32-bit

LegalCopyright
ooVoo LLC Copyright

MachineType
Intel 386 or later, and compatibles

CompanyName
ooVoo LLC

LegalTrademarks
ooVoo LLC Copyright

FileSubtype
0

ProductVersionNumber
3.4.3.2

EntryPoint
0x530f

ObjectFileType
Executable application

File identification
MD5 7db792adc71e9dc0f6bb28a5f802b7ab
SHA1 c5a7e187086393836743f382394d543aad770026
SHA256 178abda803f0f0a65ff9bc2b34b902a6c65ff54918a1cd2bdd7548bd7dd969a4
ssdeep
3072:4pESbtQzdc0jgfvIO7F41nSk28WBjdxzWdIAIaU1Hvdk4jKB9vFvl:hf4R4RcdtWedJ5W4jKBN

authentihash a4c6afe83c7ddb12427a27547603eeec7e9675b8519b18ef89a9762141dfc25d
imphash 49f3de9080a70042e8baf5a94cdcf230
File size 160.0 KB ( 163840 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID Win64 Executable (generic) (64.6%)
Win32 Dynamic Link Library (generic) (15.4%)
Win32 Executable (generic) (10.5%)
Generic Win/DOS Executable (4.6%)
DOS Executable Generic (4.6%)
Tags
peexe

VirusTotal metadata
First submission 2016-01-20 09:28:48 UTC ( 3 years ago )
Last submission 2016-12-17 07:58:55 UTC ( 2 years, 1 month ago )
File names Summarized Apps
pcriminologybuffoonery.exe
89hg56fd.exe
89hg56fd_exe
pcriminologybuffoonery.exe
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!
Condensed report! The following is a condensed report of the behaviour of the file when executed in a controlled environment. The actions and events described were either performed by the file itself or by any other process launched by the executed file or subjected to code injection by the executed file.
Opened files
Read files
Written files
Created processes
Code injections in the following processes
Created mutexes
Opened mutexes
Opened service managers
Opened services
Runtime DLLs
TCP connections
UDP communications