× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
File name: hg.htm
Detection ratio: 0 / 54
Analysis date: 2016-02-08 17:12:58 UTC ( 2 years, 8 months ago ) View latest
Empty file! This file is 0 bytes in size, software running in your computer may have blocked the file that you intended to upload or you may have sent an empty file.
Antivirus Result Update
ALYac 20160208
AVG 20160208
Ad-Aware 20160208
AegisLab 20160208
Yandex 20160206
AhnLab-V3 20160208
Alibaba 20160204
Antiy-AVL 20160208
Arcabit 20160208
Avast 20160208
Avira (no cloud) 20160208
Baidu-International 20160208
BitDefender 20160208
Bkav 20160204
ByteHero 20160208
CAT-QuickHeal 20160208
CMC 20160205
ClamAV 20160206
Comodo 20160208
Cyren 20160208
DrWeb 20160208
ESET-NOD32 20160208
Emsisoft 20160208
F-Prot 20160129
F-Secure 20160208
Fortinet 20160208
GData 20160208
Ikarus 20160208
Jiangmin 20160208
K7AntiVirus 20160208
K7GW 20160208
Kaspersky 20160208
Malwarebytes 20160208
McAfee 20160208
McAfee-GW-Edition 20160208
eScan 20160208
Microsoft 20160208
NANO-Antivirus 20160208
Panda 20160207
Qihoo-360 20160208
Rising 20160208
SUPERAntiSpyware 20160208
Sophos AV 20160208
Symantec 20160208
Tencent 20160208
TheHacker 20160206
TrendMicro 20160208
TrendMicro-HouseCall 20160208
VBA32 20160208
VIPRE 20160208
ViRobot 20160208
Zillya 20160208
Zoner 20160208
nProtect 20160205
CarbonBlack CarbonBlack acts as a surveillance camera for computers
While monitoring an end-user machine in-the-wild, CarbonBlack noticed the following files in execution wrote this sample to disk.
Execution parents
PE resource-wise parents
Compressed bundles
PCAP parents
File identification
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
ssdeep
3::

File size 0 bytes ( 0 bytes )
File type unknown
Magic literal
empty

TrID Unknown!
Tags
via-tor zero-filled nsrl trusted software-collection

Trusted verdicts
This file belongs to the Google software catalogue. The file is often found with android-cts-7.1_r6-linux_x86-arm.zip as its name.
This file belongs to the Microsoft Corporation software catalogue. The file is often found with InstallationSBSTests.csproj.CopyComplete as its name.
VirusTotal metadata
First submission 2006-09-18 07:26:15 UTC ( 12 years, 1 month ago )
Last submission 2018-10-21 21:01:59 UTC ( 2 minutes ago )
File names executable.exe
bloc-notes.exe
android-cts-7.1_r6-linux_x86-arm.zip
smb-vx1jqsfa.tmp
DUChecker-V.1.0
AUTORUN.INF
pics.lnk
ChilledWindows.rar
Let Down - Karma Police.mp3
VxEiyjhUePk
smb-w32hgaal.tmp
COMPLETE208_MalwareJsonDB.db
revelation.exe
70516682331c45a02817b748e847771687c882d905d15edb0d2f18208f9fef98
smb-_gv3uqlp.tmp
CPU Monitor - temperature, usage, performance_6.2.0_apk-dl.com.apk
202
cf-j2re-win.cab
smb-qp40g3qo.tmp
KeepVid_VIP-2.2.0.11-MrTechTamil.apk
smb-y3wdor4b.tmp
cookies.txt
La leona blanca - Henning Mankell.pdf
yousra.exe
smb-lihm6efp.tmp
Software collections
website http://oldapps.com/blender.php?old_blender=7584
oldapps http://oldapps.com/blender.php?old_blender=7584?download
product Blender 2.63 (x64)
developer The Blender Foundation
National Software Reference Library (NIST)
The National Software Reference Library (NSRL) is designed to collect software from various sources and incorporate file profiles computed from this software into a reference data set of information. This file was found in the NSRL dataset, in the following products and with the following file names.
Products DRAW (Corel Corporation)
Photo-Paint (Corel Corporation)
Commerce Server Developer Edition (Microsoft)
Exchange Server Enterprise Edition (Microsoft)
eMbedded Visual Tools (Microsoft)
Internet Security and Acceleration Server - Enterprise Edition (Microsoft)
Commerce Server - Developer Edition (Microsoft)
Linux (Corel Corporation)
Yourideallink.com (Ideal link Inc.)
NSRL Test (NIST)
Visio (Microsoft)
Visio Enterprise Edition (Microsoft)
EarthLink (Earthlink Inc.)
Riven (Red Orb)
Quicken (Intuit Inc.)
Get Set to Learn (Creative Wonders)
MySQL (NuSphere Corporation)
Windows (Microsoft)
QuickBooks (Intuit Inc.)
Tivoli Manager (Tivoli)
File names 1, Augustin, Butterfield, Cook, Copperplate Gothic (1, Copperplate Gothic (8, Drummer, Erickson, Eurostile (1, Eurostile 2 (3, FJSV, FMI, Flynn, Gorman, Holmes, Ivey, Jirik, Koval, Lovitz, MAHJONGG.{EASY, Met Turn, Midstokke, NATE, Nipstad, Oak, Papenfuss, Quigley, Rada, Ross, SUNW, Schue, Sorry, TI, Thuen, Uglem, Univers (1-5, Univers Condensed (2, Vorhees, Wicker, Xanadu, Yaeger, Zimmerman, btmgr.spec, nasm.vim, sunw
iesetup.dir
BLANK.TXT, blogo.gi!, blogo.gi_
ROUTE.TBL
BLANK DOCUMENT.PSW, BLANK NOTE.PWI, CD1.INF, FILEOSP.RC, chat.adm
cdrom_sp.tst
.FVWM95, .FVWM95RC, .TEXTSWRC, .TEXT_EXTRAS_MENU, .TTYSWRC, ADDGROUP, ANSI, AWK, AWK.1, CAPTOINFO, CBB-MAN, COMPILED, CONFIG, DIGITAL, DUMB, DYNALOADER, EDITOR, EDITOR.1, FDLIST, FDMOUNT.CONF, FDMOUNTD, FDUMOUNT, FUJITSU, GENKSYMS, INFOTOCAP, INIT-RESTART.HOOK, INIT.HOOK, IO, IO.BS, LASTB, LD-LINUX.000, LD-LINUX.SO, LIBAPT-PKG.001, LIBAPT-PKG.SO, LIBATTRGLYPH.001, LIBATTRGLYPH.SO, LIBATTRIBUTE.001, LIBATTRIBUTE.SO, LIBBROKENLOCALE.SO, LIBC.SO, LIBCOMGLYPH.001, LIBCOMGLYPH.SO, LIBCOMTERP.001, LIBCOMTERP.SO, LIBCOMUNIDRAW.001, LIBCOMUNIDRAW.SO, LIBCOMUTIL.001, LIBCOMUTIL.SO, LIBCOM_ERR.000, LIBCRYPT.SO, LIBDB.SO, LIBDL.000, LIBDL.SO, LIBDND++.SO, LIBDND.SO, LIBDPKG.000, LIBDPKG.001, LIBDRAWSERV.001, LIBDRAWSERV.SO, LIBE2P.000, LIBEXT2FS.000, LIBFORM.000, LIBFRAMEUNIDRAW.001, LIBFRAMEUNIDRAW.SO, LIBGDBM.000, LIBGDBM.001, LIBGIF.000, LIBGIF.SO, LIBGRAPHUNIDRAW.001, LIBGRAPHUNIDRAW.SO, LIBHISTORY.000, LIBICE.001, LIBICE.SO, LIBIV-COMMON.001, LIBIV-COMMON.SO, LIBIV.001, LIBIV.SO, LIBIVGLYPH.001, LIBIVGLYPH.SO, LIBJPEG.000, LIBJPEG.SO, LIBM.SO, LIBMAGICK.SO, LIBMENU.000, LIBMRM.001, LIBMRM.SO, LIBNSL.SO, LIBNSS_COMPAT.SO, LIBNSS_DB.SO, LIBNSS_DNS.SO, LIBNSS_FILES.SO, LIBNSS_NIS.SO, LIBOLGX.SO, LIBOVERLAYUNIDRAW.001, LIBOVERLAYUNIDRAW.SO, LIBPANEL.000, LIBPEX5.001, LIBPEX5.SO, LIBPTHREAD.SO, LIBQT.001, LIBQT.SO, LIBRESOLV.SO, LIBSLANG.000, LIBSM.001, LIBSM.SO, LIBSS.000, LIBSTDC++-LIBC6.0-1, LIBSTDC++-LIBC6.1-1, LIBSTDC++.001, LIBSTDC++.SO, LIBTIFF.SO, LIBTIME.001, LIBTIME.SO, LIBTOPOFACE.001, LIBTOPOFACE.SO, LIBUNGIF.SO, LIBUNIDRAW-COMMON.001, LIBUNIDRAW-COMMON.SO, LIBUNIDRAW.001, LIBUNIDRAW.SO, LIBUNIIDRAW.001, LIBUNIIDRAW.SO, LIBUTIL.SO, LIBUUID.000, LIBWRASTER.SO, LIBWXGRID_XT.SO, LIBWXTAB_XT.SO, LIBWX_XT.SO, LIBWX_XTTHREAD.SO, LIBWX_XTWIDGETS.SO, LIBX11.001, LIBX11.SO, LIBXAW.001, LIBXAW.SO, LIBXAW3D.001, LIBXAW3D.SO, LIBXEXT.001, LIBXEXT.SO, LIBXI.001, LIBXI.SO, LIBXIE.001, LIBXIE.SO, LIBXM.001, LIBXM.SO, LIBXMU.001, LIBXMU.SO, LIBXP.001, LIBXP.SO, LIBXPM.000, LIBXPM.SO, LIBXT.001, LIBXT.SO, LIBXTST.001, LIBXTST.SO, LIBXVIEW.SO, LIBZ.001, LIBZ.SO, LOCALE.ALIAS, MACINTOSH, MAIN-MENU-PRE.HOOK, MAIN-MENU.HOOK, MENUDEFS.HOOK, NAWK, NAWK.1, NEC, NEWXSERVER.XSERVER-VGA16, PAGER, PIDOF, POST.HOOK, POWEROFF, RAMSIZE, RBASH, RCLOCK, REBOOT, RESET, RMMOD, ROOTFLAGS, RXVT, RXVT-M, SCREEN, SCREEN-W, SECURITYPOLICY, SG, SGI, SHELLTOOL, SOCKET, SOCKET.BS, SONY, SUN, SWAPDEV, SWAPOFF, TABSET, TELINIT, TERMINFO, VI.1, VIDMODE, VIGR, VT100, VT102, VT220, VT52, W.1, X11R6, XDFFORMAT, XDM-CONFIG, XDVI, XF86CONFIG, XFTP, XINITRC, XKBCOMP, XSCREENSAVER, XSERVERRC, XSETBG, XSYSINFO, XTERM, XTERM-DEBIAN, XTERM-XFREE86
rfc779.htm
test1.txt, test1.z
INSTALL.LOG
Drafts, Inbox, Sent, Templates, Trash, Unsent_Messages, blogo.gi!, blogo.gi_, ns45_drafts, ns45_inbox, ns45_sent, ns45_templates, ns45_trash, ns45_unsent_messages, phonepref.txt
MSDN332.INF
PREFREPT.BMP, PREFRPT2.BMP, PREFSMOD.BMP, PREFSWIN.BMP, PROGGRP1.BMP, PROGGRP2.BMP, PROGRUN.BMP, QCARD01.BMP, QCARD06.BMP, UGCHAP9.BMP
BD.CON, BF.CON, BG.CON, BL.CON, BN.CON, BNCON.WRI, CC.CON, CD.CON, DISK1, DISK2, DISK3, WOW.DRV
.exists, API.bs, B.bs, Base64.bs, ByteLoader.bs, ChangeNotify.bs, Clipboard.bs, Console.bs, DBI.bs, DB_File.bs, DProf.bs, Dumper.bs, Embperl.bs, Event.bs, EventLog.bs, Fcntl.bs, FileSecurity.bs, GDBM_File.bs, Glob.bs, Hostname.bs, IO.bs, IPC.bs, Internet.bs, Leak.bs, MD2.bs, MD5.bs, Mutex.bs, NDBM_File.bs, Net.bs, NetAdmin.bs, NetResource.bs, ODBC.bs, ODBM_File.bs, OLE.bs, Opcode.bs, Oracle.bs, POSIX.bs, Peek.bs, PerfLib.bs, Pipe.bs, Process.bs, Registry.bs, SDBM_File.bs, SHA1.bs, Semaphore.bs, Service.bs, Shortcut.bs, Socket.bs, Sound.bs, Storable.bs, Symbol.bs, SysV.bs, Syslog.bs, Thread.bs, Win32.bs, WinError.bs, attrs.bs, carts.MYD, columns_priv.MYD, comments, host.MYD, images.MYD, mail, mrbs_entry.MYD, mrbs_repeat.MYD, mysql.bs, nomail, sessions.MYD, tables_priv.MYD, users.MYD, zlib.bs
empty.htm, logagent.exe, quartz.dll, tvxdup.001, vnetsup.vxd, xeno.avb
blogo.gi!, blogo.gi_
MessagesD.properties, MessagesF.properties, MessagesJA.properties, access_log
CUSTOMERSERVICE.RESX, CUSTOMERSERVICES.CUSTOMERSERVICE.RESOURCES, DEFAULT.ASPX.RESX, EXCEPTIONHANDLING.EXCEPTIONHANDLINGFORM.RESOURCES, EXCEPTIONHANDLINGFORM.RESX, FRMPOORUPGRADE.RESX, GLOBAL.ASAX.RESX, LOGIN.ASPX.RESX, MAINFORM.RESX, MOBILEWEBFORM1.ASPX.RESX, README.ASPX.RESX, SERVICE.LCK, SERVICE1.ASMX.RESX, VB6POOREXAMPLE.FRMPOORUPGRADE.RESOURCES, WEBAPPLICATION3.GLOBAL.RESOURCES, WEBAPPLICATION3.WEBFORM1.RESOURCES, _11EVENTLOGGINGDEMO.README.RESOURCES, _MYHEADER.ASCX.RESX
DECSCSI, DISK1, DISK103, PLANGEOAREA.BCP, SPCDROM.40, TAGFILE.1
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!
Condensed report! The following is a condensed report of the behaviour of the file when executed in a controlled environment. The actions and events described were either performed by the file itself or by any other process launched by the executed file or subjected to code injection by the executed file.
HTTP requests
TCP connections