× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 4d990fd3346a53bbccde18dc791040de36244a245b7bd0b9f52c432f62ac01d4
File name: StatVSPvPP.exe
Detection ratio: 0 / 46
Analysis date: 2012-12-09 21:38:02 UTC ( 1 year, 4 months ago ) View latest
Antivirus Result Update
AVG 20121209
Agnitum 20121209
AhnLab-V3 20121209
AntiVir 20121209
Antiy-AVL 20121204
Avast 20121209
BitDefender 20121209
ByteHero 20121130
CAT-QuickHeal 20121209
ClamAV 20121208
Commtouch 20121209
Comodo 20121209
DrWeb 20121209
ESET-NOD32 20121209
Emsisoft 20121209
F-Prot 20121209
F-Secure 20121209
Fortinet 20121209
GData 20121209
Ikarus 20121209
Jiangmin 20121209
K7AntiVirus 20121208
Kaspersky 20121209
Kingsoft 20121206
Malwarebytes 20121209
McAfee 20121209
McAfee-GW-Edition 20121209
MicroWorld-eScan 20121209
Microsoft 20121209
NANO-Antivirus 20121209
Norman 20121209
PCTools 20121209
Panda 20121209
Rising 20121207
SUPERAntiSpyware 20121209
Sophos 20121209
Symantec 20121209
TheHacker 20121207
TotalDefense 20121209
TrendMicro 20121209
TrendMicro-HouseCall 20121209
VBA32 20121207
VIPRE 20121209
ViRobot 20121209
eSafe 20121205
nProtect 20121208
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2012-12-09 19:08:55
Entry Point 0x000038C8
Number of sections 4
PE sections
PE imports
_CorExeMain
Number of PE resources by type
RT_ICON 2
RT_MANIFEST 1
RT_GROUP_ICON 1
Number of PE resources by language
SWEDISH 3
ENGLISH US 1
ExifTool file metadata
MIMEType
application/octet-stream

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

TimeStamp
2012:12:09 19:08:55+00:00

FileType
Win32 EXE

PEType
PE32

CodeSize
12800

LinkerVersion
10.0

EntryPoint
0x38c8

InitializedDataSize
48640

SubsystemVersion
5.1

ImageVersion
0.0

OSVersion
5.1

UninitializedDataSize
0

File identification
MD5 ccca7b6be000fa270dc01abe536866a7
SHA1 29b47415daabdd5f789f64f2fca53bfc577f3da6
SHA256 4d990fd3346a53bbccde18dc791040de36244a245b7bd0b9f52c432f62ac01d4
ssdeep
1536:3V4KBCKDMzgH8swI+T9PTn422b4HuwIAXvTVo/0V2+8N+ezSSITsEavmQ84:aKBCKDMUcswI+ZPTn422b4HuwIAXvTVK

File size 61.0 KB ( 62464 bytes )
File type Win32 EXE
Magic literal
MS-DOS executable PE for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly

TrID Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
Tags
peexe

VirusTotal metadata
First submission 2012-12-09 21:38:02 UTC ( 1 year, 4 months ago )
Last submission 2012-12-10 07:53:54 UTC ( 1 year, 4 months ago )
File names StatVSPvPP.exe
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!