× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
File name: _#URLSTR
Detection ratio: 0 / 56
Analysis date: 2015-03-29 10:34:34 UTC ( 2 minutes ago )
Empty file! This file is 0 bytes in size, software running in your computer may have blocked the file that you intended to upload or you may have sent an empty file.
Antivirus Result Update
ALYac 20150329
AVG 20150329
AVware 20150329
Ad-Aware 20150329
AegisLab 20150329
Agnitum 20150328
AhnLab-V3 20150328
Alibaba 20150329
Antiy-AVL 20150329
Avast 20150329
Avira 20150329
Baidu-International 20150329
BitDefender 20150329
Bkav 20150328
ByteHero 20150329
CAT-QuickHeal 20150328
CMC 20150327
ClamAV 20150329
Comodo 20150329
Cyren 20150329
DrWeb 20150329
ESET-NOD32 20150329
Emsisoft 20150329
F-Prot 20150329
F-Secure 20150329
Fortinet 20150329
GData 20150329
Ikarus 20150329
Jiangmin 20150328
K7AntiVirus 20150329
K7GW 20150329
Kaspersky 20150329
Kingsoft 20150329
Malwarebytes 20150329
McAfee 20150329
McAfee-GW-Edition 20150329
MicroWorld-eScan 20150329
Microsoft 20150329
NANO-Antivirus 20150329
Norman 20150329
Panda 20150327
Qihoo-360 20150329
Rising 20150328
SUPERAntiSpyware 20150328
Sophos 20150329
Symantec 20150329
Tencent 20150329
TheHacker 20150327
TotalDefense 20150329
TrendMicro 20150329
TrendMicro-HouseCall 20150329
VBA32 20150327
VIPRE 20150329
ViRobot 20150329
Zillya 20150329
Zoner 20150327
nProtect 20150327
CarbonBlack CarbonBlack acts as a surveillance camera for computers
While monitoring an end-user machine in-the-wild, CarbonBlack noticed the following files in execution wrote this sample to disk.
While monitoring an end-user machine in-the-wild, CarbonBlack noticed this sample wrote the following files to disk.
Execution parents
PE resource-wise parents
Compressed bundles
PCAP parents
File identification
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
ssdeep
3::

File size 0 bytes ( 0 bytes )
File type unknown
Magic literal
empty

TrID Unknown!
Tags
zero-filled via-tor nsrl trusted software-collection

Trusted verdicts
This file belongs to the Microsoft Corporation software catalogue. The file is often found with _#ITBITS as its name. The file belongs to the Windows product, more specifically in ['SW CD NTRL Windows XPSP2 Italian #1'].
VirusTotal metadata
First submission 2006-09-18 07:26:15 UTC ( 8 years, 6 months ago )
Last submission 2015-03-29 10:33:01 UTC ( 4 minutes ago )
File names test.bmp
Trainer Combat Arms [VIP]
unsecapp.exe
57380_billboard--designandelectrical.zip
Административки и Служебки
alg.exe
F.UnknownProtocol__client.bin
4DF1-CB6A:.android_secure
rptIpPrintNew-3.pdf
jar
Quickswitch - GUI_unpacked.exe
61060541
ativpsrm.bin
sff.sff
1).rar
Neues Textdokument.txt
AutoCAD_MEP_2016_Russian_Win_64bit_dlm_002_002.sfx.exe
UpdateTask.exe
Xilisoft Video Cutter v2.0.1.0111 Portable.exe
61065541
OnLineRecovery_JF200_220_v1.17
4a796fc3-afb2-4af0-ae25-3ddb6c9e4a3c.exe
CS101x_S007_Need_for_Arrays_IIT_Bombay.lnk
new text document.txt
61070127
Software collections
website http://oldapps.com/blender.php?old_blender=7584
oldapps http://oldapps.com/blender.php?old_blender=7584?download
product Blender 2.63 (x64)
developer The Blender Foundation
National Software Reference Library (NIST)
The National Software Reference Library (NSRL) is designed to collect software from various sources and incorporate file profiles computed from this software into a reference data set of information. This file was found in the NSRL dataset, in the following products and with the following file names.
Products DRAW (Corel Corporation)
Photo-Paint (Corel Corporation)
Commerce Server Developer Edition (Microsoft)
Exchange Server Enterprise Edition (Microsoft)
eMbedded Visual Tools (Microsoft)
Internet Security and Acceleration Server - Enterprise Edition (Microsoft)
Commerce Server - Developer Edition (Microsoft)
Linux (Corel Corporation)
Yourideallink.com (Ideal link Inc.)
NSRL Test (NIST)
Visio (Microsoft)
Visio Enterprise Edition (Microsoft)
EarthLink (Earthlink Inc.)
Riven (Red Orb)
Quicken (Intuit Inc.)
Get Set to Learn (Creative Wonders)
MySQL (NuSphere Corporation)
Windows (Microsoft)
QuickBooks (Intuit Inc.)
Tivoli Manager (Tivoli)
File names 1, Augustin, Butterfield, Cook, Copperplate Gothic (1, Copperplate Gothic (8, Drummer, Erickson, Eurostile (1, Eurostile 2 (3, FJSV, FMI, Flynn, Gorman, Holmes, Ivey, Jirik, Koval, Lovitz, MAHJONGG.{EASY, Met Turn, Midstokke, NATE, Nipstad, Oak, Papenfuss, Quigley, Rada, Ross, SUNW, Schue, Sorry, TI, Thuen, Uglem, Univers (1-5, Univers Condensed (2, Vorhees, Wicker, Xanadu, Yaeger, Zimmerman, btmgr.spec, nasm.vim, sunw
iesetup.dir
BLANK.TXT, blogo.gi!, blogo.gi_
ROUTE.TBL
BLANK DOCUMENT.PSW, BLANK NOTE.PWI, CD1.INF, FILEOSP.RC, chat.adm
cdrom_sp.tst
.FVWM95, .FVWM95RC, .TEXTSWRC, .TEXT_EXTRAS_MENU, .TTYSWRC, ADDGROUP, ANSI, AWK, AWK.1, CAPTOINFO, CBB-MAN, COMPILED, CONFIG, DIGITAL, DUMB, DYNALOADER, EDITOR, EDITOR.1, FDLIST, FDMOUNT.CONF, FDMOUNTD, FDUMOUNT, FUJITSU, GENKSYMS, INFOTOCAP, INIT-RESTART.HOOK, INIT.HOOK, IO, IO.BS, LASTB, LD-LINUX.000, LD-LINUX.SO, LIBAPT-PKG.001, LIBAPT-PKG.SO, LIBATTRGLYPH.001, LIBATTRGLYPH.SO, LIBATTRIBUTE.001, LIBATTRIBUTE.SO, LIBBROKENLOCALE.SO, LIBC.SO, LIBCOMGLYPH.001, LIBCOMGLYPH.SO, LIBCOMTERP.001, LIBCOMTERP.SO, LIBCOMUNIDRAW.001, LIBCOMUNIDRAW.SO, LIBCOMUTIL.001, LIBCOMUTIL.SO, LIBCOM_ERR.000, LIBCRYPT.SO, LIBDB.SO, LIBDL.000, LIBDL.SO, LIBDND++.SO, LIBDND.SO, LIBDPKG.000, LIBDPKG.001, LIBDRAWSERV.001, LIBDRAWSERV.SO, LIBE2P.000, LIBEXT2FS.000, LIBFORM.000, LIBFRAMEUNIDRAW.001, LIBFRAMEUNIDRAW.SO, LIBGDBM.000, LIBGDBM.001, LIBGIF.000, LIBGIF.SO, LIBGRAPHUNIDRAW.001, LIBGRAPHUNIDRAW.SO, LIBHISTORY.000, LIBICE.001, LIBICE.SO, LIBIV-COMMON.001, LIBIV-COMMON.SO, LIBIV.001, LIBIV.SO, LIBIVGLYPH.001, LIBIVGLYPH.SO, LIBJPEG.000, LIBJPEG.SO, LIBM.SO, LIBMAGICK.SO, LIBMENU.000, LIBMRM.001, LIBMRM.SO, LIBNSL.SO, LIBNSS_COMPAT.SO, LIBNSS_DB.SO, LIBNSS_DNS.SO, LIBNSS_FILES.SO, LIBNSS_NIS.SO, LIBOLGX.SO, LIBOVERLAYUNIDRAW.001, LIBOVERLAYUNIDRAW.SO, LIBPANEL.000, LIBPEX5.001, LIBPEX5.SO, LIBPTHREAD.SO, LIBQT.001, LIBQT.SO, LIBRESOLV.SO, LIBSLANG.000, LIBSM.001, LIBSM.SO, LIBSS.000, LIBSTDC++-LIBC6.0-1, LIBSTDC++-LIBC6.1-1, LIBSTDC++.001, LIBSTDC++.SO, LIBTIFF.SO, LIBTIME.001, LIBTIME.SO, LIBTOPOFACE.001, LIBTOPOFACE.SO, LIBUNGIF.SO, LIBUNIDRAW-COMMON.001, LIBUNIDRAW-COMMON.SO, LIBUNIDRAW.001, LIBUNIDRAW.SO, LIBUNIIDRAW.001, LIBUNIIDRAW.SO, LIBUTIL.SO, LIBUUID.000, LIBWRASTER.SO, LIBWXGRID_XT.SO, LIBWXTAB_XT.SO, LIBWX_XT.SO, LIBWX_XTTHREAD.SO, LIBWX_XTWIDGETS.SO, LIBX11.001, LIBX11.SO, LIBXAW.001, LIBXAW.SO, LIBXAW3D.001, LIBXAW3D.SO, LIBXEXT.001, LIBXEXT.SO, LIBXI.001, LIBXI.SO, LIBXIE.001, LIBXIE.SO, LIBXM.001, LIBXM.SO, LIBXMU.001, LIBXMU.SO, LIBXP.001, LIBXP.SO, LIBXPM.000, LIBXPM.SO, LIBXT.001, LIBXT.SO, LIBXTST.001, LIBXTST.SO, LIBXVIEW.SO, LIBZ.001, LIBZ.SO, LOCALE.ALIAS, MACINTOSH, MAIN-MENU-PRE.HOOK, MAIN-MENU.HOOK, MENUDEFS.HOOK, NAWK, NAWK.1, NEC, NEWXSERVER.XSERVER-VGA16, PAGER, PIDOF, POST.HOOK, POWEROFF, RAMSIZE, RBASH, RCLOCK, REBOOT, RESET, RMMOD, ROOTFLAGS, RXVT, RXVT-M, SCREEN, SCREEN-W, SECURITYPOLICY, SG, SGI, SHELLTOOL, SOCKET, SOCKET.BS, SONY, SUN, SWAPDEV, SWAPOFF, TABSET, TELINIT, TERMINFO, VI.1, VIDMODE, VIGR, VT100, VT102, VT220, VT52, W.1, X11R6, XDFFORMAT, XDM-CONFIG, XDVI, XF86CONFIG, XFTP, XINITRC, XKBCOMP, XSCREENSAVER, XSERVERRC, XSETBG, XSYSINFO, XTERM, XTERM-DEBIAN, XTERM-XFREE86
rfc779.htm
test1.txt, test1.z
INSTALL.LOG
Drafts, Inbox, Sent, Templates, Trash, Unsent_Messages, blogo.gi!, blogo.gi_, ns45_drafts, ns45_inbox, ns45_sent, ns45_templates, ns45_trash, ns45_unsent_messages, phonepref.txt
MSDN332.INF
PREFREPT.BMP, PREFRPT2.BMP, PREFSMOD.BMP, PREFSWIN.BMP, PROGGRP1.BMP, PROGGRP2.BMP, PROGRUN.BMP, QCARD01.BMP, QCARD06.BMP, UGCHAP9.BMP
BD.CON, BF.CON, BG.CON, BL.CON, BN.CON, BNCON.WRI, CC.CON, CD.CON, DISK1, DISK2, DISK3, WOW.DRV
.exists, API.bs, B.bs, Base64.bs, ByteLoader.bs, ChangeNotify.bs, Clipboard.bs, Console.bs, DBI.bs, DB_File.bs, DProf.bs, Dumper.bs, Embperl.bs, Event.bs, EventLog.bs, Fcntl.bs, FileSecurity.bs, GDBM_File.bs, Glob.bs, Hostname.bs, IO.bs, IPC.bs, Internet.bs, Leak.bs, MD2.bs, MD5.bs, Mutex.bs, NDBM_File.bs, Net.bs, NetAdmin.bs, NetResource.bs, ODBC.bs, ODBM_File.bs, OLE.bs, Opcode.bs, Oracle.bs, POSIX.bs, Peek.bs, PerfLib.bs, Pipe.bs, Process.bs, Registry.bs, SDBM_File.bs, SHA1.bs, Semaphore.bs, Service.bs, Shortcut.bs, Socket.bs, Sound.bs, Storable.bs, Symbol.bs, SysV.bs, Syslog.bs, Thread.bs, Win32.bs, WinError.bs, attrs.bs, carts.MYD, columns_priv.MYD, comments, host.MYD, images.MYD, mail, mrbs_entry.MYD, mrbs_repeat.MYD, mysql.bs, nomail, sessions.MYD, tables_priv.MYD, users.MYD, zlib.bs
empty.htm, logagent.exe, quartz.dll, tvxdup.001, vnetsup.vxd, xeno.avb
blogo.gi!, blogo.gi_
MessagesD.properties, MessagesF.properties, MessagesJA.properties, access_log
CUSTOMERSERVICE.RESX, CUSTOMERSERVICES.CUSTOMERSERVICE.RESOURCES, DEFAULT.ASPX.RESX, EXCEPTIONHANDLING.EXCEPTIONHANDLINGFORM.RESOURCES, EXCEPTIONHANDLINGFORM.RESX, FRMPOORUPGRADE.RESX, GLOBAL.ASAX.RESX, LOGIN.ASPX.RESX, MAINFORM.RESX, MOBILEWEBFORM1.ASPX.RESX, README.ASPX.RESX, SERVICE.LCK, SERVICE1.ASMX.RESX, VB6POOREXAMPLE.FRMPOORUPGRADE.RESOURCES, WEBAPPLICATION3.GLOBAL.RESOURCES, WEBAPPLICATION3.WEBFORM1.RESOURCES, _11EVENTLOGGINGDEMO.README.RESOURCES, _MYHEADER.ASCX.RESX
DECSCSI, DISK1, DISK103, PLANGEOAREA.BCP, SPCDROM.40, TAGFILE.1
ExifTool file metadata
FileAccessDate
2015:02:22 18:08:47+01:00

FileCreateDate
2015:02:22 18:08:47+01:00

No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!