× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 3c102c69cd0dc5c6a3d60bdb6aa93c54e676c5e913fe771558e74a52db9c99a4
File name: bea8ec8edaabfabe82c734a1f539b0e0
Detection ratio: 27 / 55
Analysis date: 2014-08-28 18:20:27 UTC ( 4 years, 7 months ago )
Antivirus Result Update
Ad-Aware Gen:Variant.Graftor.152389 20140827
AhnLab-V3 Spyware/Win32.Zbot 20140828
Antiy-AVL Trojan[Spy]/Win32.Zbot 20140828
Avast Win32:Malware-gen 20140828
AVG Inject2.ASIU 20140828
AVware FraudTool.Win32.SecurityShield.ek!c (v) 20140828
BitDefender Gen:Variant.Graftor.152389 20140828
Comodo UnclassifiedMalware 20140828
DrWeb Trojan.PWS.Panda.7630 20140828
Emsisoft Gen:Variant.Graftor.152389 (B) 20140828
ESET-NOD32 a variant of Win32/Injector.BKNN 20140828
F-Secure Gen:Variant.Graftor.152389 20140828
Fortinet W32/BKNN!tr 20140828
GData Gen:Variant.Graftor.152389 20140828
Ikarus Trojan.Win32.Injector 20140828
K7GW Unwanted-File ( 6b49d2001 ) 20140828
Kingsoft Win32.Troj.Zbot.tw.(kcloud) 20140828
Malwarebytes Trojan.Zbot 20140828
McAfee Artemis!BEA8EC8EDAAB 20140828
McAfee-GW-Edition Artemis!BEA8EC8EDAAB 20140828
eScan Gen:Variant.Graftor.152389 20140828
NANO-Antivirus Trojan.Win32.Zbot.decmsm 20140828
SUPERAntiSpyware Trojan.Agent/Gen-BEPA 20140828
Symantec WS.Reputation.1 20140828
VIPRE FraudTool.Win32.SecurityShield.ek!c (v) 20140828
ViRobot Trojan.Win32.Zbot.251978 20140828
Zillya Trojan.ZBot.Win32.28 20140828
AegisLab 20140828
Yandex 20140828
AntiVir 20140828
Baidu-International 20140828
Bkav 20140828
ByteHero 20140828
CAT-QuickHeal 20140828
ClamAV 20140828
CMC 20140828
Cyren 20140828
F-Prot 20140828
Jiangmin 20140827
K7AntiVirus 20140828
Kaspersky 20140828
Microsoft 20140828
Norman 20140828
nProtect 20140828
Panda 20140828
Qihoo-360 20140828
Rising 20140828
Sophos AV 20140828
Tencent 20140828
TheHacker 20140827
TotalDefense 20140828
TrendMicro 20140828
TrendMicro-HouseCall 20140828
VBA32 20140828
Zoner 20140826
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file.
FileVersionInfo properties
Copyright
Copyright © 1998-2013 VMware, Inc.

Publisher VMware, Inc.
Product VMware Workstation
Original name vmware-vmx.exe
Internal name vmware-vmx
File version 10.0.1 build-1379776
Description VMware Workstation VMX
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2014-07-21 19:55:17
Entry Point 0x00002DBA
Number of sections 6
PE sections
Number of PE resources by type
RT_STRING 3
RT_DIALOG 1
RT_ICON 1
RT_MENU 1
RT_ACCELERATOR 1
RT_BITMAP 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
CHINESE SIMPLIFIED 8
NEUTRAL 2
PE resources
File identification
MD5 bea8ec8edaabfabe82c734a1f539b0e0
SHA1 249e318c6c4404b137dac21bc49829a6fd3ce9b9
SHA256 3c102c69cd0dc5c6a3d60bdb6aa93c54e676c5e913fe771558e74a52db9c99a4
ssdeep
1536:vnbRdjYhFVGg0sAFx4AUsXffdHOzqDGKVEhW:PuGg0ftLXHdbDGhW

imphash e00bc4fbbfadbba6dc00894c2d7af9ac
File size 87.0 KB ( 89060 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID Win32 Executable MS Visual C++ (generic) (67.3%)
Win32 Dynamic Link Library (generic) (14.2%)
Win32 Executable (generic) (9.7%)
Generic Win/DOS Executable (4.3%)
DOS Executable Generic (4.3%)
Tags
corrupt peexe

VirusTotal metadata
First submission 2014-08-28 18:20:27 UTC ( 4 years, 7 months ago )
Last submission 2014-08-28 18:20:27 UTC ( 4 years, 7 months ago )
File names vmware-vmx
bea8ec8edaabfabe82c734a1f539b0e0
vmware-vmx.exe
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!