| SHA256: | 9616108c6bf1c13a98ff0b5d2b7772e8ede512e115ecadf3d03f8aba056bda83 |
| File name: | 9616108c6bf1c13a98ff0b5d2b7772e8ede512e115ecadf3d03f8aba056bda83 |
| Detection ratio: | 10 / 70 |
| Analysis date: | 2018-12-23 03:46:43 UTC ( 1 month, 3 weeks ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| Acronis | malware | 20181222 |
| CrowdStrike Falcon (ML) | malicious_confidence_100% (D) | 20181022 |
| Cylance | Unsafe | 20181223 |
| Endgame | malicious (high confidence) | 20181108 |
| Sophos ML | heuristic | 20181128 |
| Qihoo-360 | HEUR/QVM20.1.0CCB.Malware.Gen | 20181223 |
| Rising | Malware.Heuristic!ET#95% (RDM+:cmRtazpIa26c/LvV8S5j6+0uW7Ac) | 20181223 |
| SentinelOne (Static ML) | static engine - malicious | 20181011 |
| Symantec | ML.Attribute.HighConfidence | 20181222 |
| Trapmine | malicious.moderate.ml.score | 20181205 |
| Ad-Aware | 20181223 | |
| AegisLab | 20181223 | |
| AhnLab-V3 | 20181222 | |
| Alibaba | 20180921 | |
| ALYac | 20181223 | |
| Antiy-AVL | 20181222 | |
| Arcabit | 20181222 | |
| Avast | 20181222 | |
| Avast-Mobile | 20181222 | |
| AVG | 20181222 | |
| Avira (no cloud) | 20181222 | |
| Babable | 20180918 | |
| Baidu | 20181207 | |
| BitDefender | 20181222 | |
| Bkav | 20181221 | |
| CAT-QuickHeal | 20181222 | |
| ClamAV | 20181223 | |
| CMC | 20181223 | |
| Comodo | 20181223 | |
| Cybereason | 20180225 | |
| Cyren | 20181223 | |
| DrWeb | 20181223 | |
| eGambit | 20181223 | |
| Emsisoft | 20181223 | |
| ESET-NOD32 | 20181223 | |
| F-Prot | 20181223 | |
| F-Secure | 20181223 | |
| Fortinet | 20181223 | |
| GData | 20181223 | |
| Jiangmin | 20181223 | |
| K7AntiVirus | 20181222 | |
| K7GW | 20181222 | |
| Kaspersky | 20181223 | |
| Kingsoft | 20181223 | |
| Malwarebytes | 20181223 | |
| MAX | 20181223 | |
| McAfee | 20181223 | |
| McAfee-GW-Edition | 20181222 | |
| Microsoft | 20181223 | |
| eScan | 20181223 | |
| NANO-Antivirus | 20181223 | |
| Palo Alto Networks (Known Signatures) | 20181223 | |
| Panda | 20181222 | |
| Sophos AV | 20181223 | |
| SUPERAntiSpyware | 20181220 | |
| Symantec Mobile Insight | 20181215 | |
| TACHYON | 20181222 | |
| Tencent | 20181223 | |
| TheHacker | 20181220 | |
| TotalDefense | 20181222 | |
| TrendMicro | 20181223 | |
| TrendMicro-HouseCall | 20181223 | |
| Trustlook | 20181223 | |
| VBA32 | 20181222 | |
| VIPRE | 20181222 | |
| ViRobot | 20181222 | |
| Webroot | 20181223 | |
| Yandex | 20181221 | |
| Zillya | 20181222 | |
| ZoneAlarm by Check Point | 20181223 | |
| Zoner | 20181223 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
(c)1996 AOL/Johnson-Grace Company
Product JGMP
Original name jgmp500.dll
Internal name JGMP
File version 2
Description JG MIDI player DLL
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2004-08-04 07:56:09
Entry Point 0x00008E2E
Number of sections 4
PE sections
PE imports
Number of PE resources by type
RT_VERSION 1
Number of PE resources by language
ENGLISH US 1
PE resources
Debug information
ExifTool file metadata
SubsystemVersion
5.1
InitializedDataSize
62976
ImageVersion
0.0
ProductName
JGMP
FileVersionNumber
5010.0.0.0
UninitializedDataSize
0
LanguageCode
English (U.S.)
FileFlagsMask
0x003f
ImageFileCharacteristics
No relocs, Executable, 32-bit
CharacterSet
Windows, Latin1
LinkerVersion
7.1
FileTypeExtension
exe
OriginalFileName
jgmp500.dll
MIMEType
application/octet-stream
Subsystem
Windows GUI
FileVersion
2
TimeStamp
2004:08:04 08:56:09+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
JGMP
ProductVersion
2
FileDescription
JG MIDI player DLL
OSVersion
5.0
FileOS
Windows 16-bit
LegalCopyright
(c)1996 AOL/Johnson-Grace Company
MachineType
Intel 386 or later, and compatibles
CompanyName
Johnson-Grace Company
CodeSize
48128
FileSubtype
0
ProductVersionNumber
5010.0.0.0
EntryPoint
0x8e2e
ObjectFileType
Dynamic link library
File identification
MD5 622bdf418b1ad9905224c24fb54a57bc
SHA1 5dd84cc287601d4b1f12243cb50c3f46eeca82e5
SHA256 9616108c6bf1c13a98ff0b5d2b7772e8ede512e115ecadf3d03f8aba056bda83
ssdeep
3072:sxRLrOxGCD/aVY3MKRAvLfRHzTiFK1DoykGuvB+9sQ77Zcx7X:sxRLrOwe33HWvLfR31DpktvBZQB
File size
200.5 KB ( 205312 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Dynamic Link Library (generic) (34.2%) Win32 Executable (generic) (23.4%) Win16/32 Executable Delphi generic (10.7%) OS/2 Executable (generic) (10.5%) Generic Win/DOS Executable (10.4%) |
Tags
peexe
VirusTotal metadata
First submission
2018-12-23 03:46:43 UTC ( 1 month, 3 weeks ago )
Last submission
2018-12-23 03:46:43 UTC ( 1 month, 3 weeks ago )
| File names |
jgmp500.dll JGMP |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!