× Les cookies sont désactivés ! Ce site exige que les cookies soient activés pour fonctionner correctement
SHA256: 44f2764d26c09daaed6f90f6905d1be5e79f64f5de017ae26ec5da90f6ca9283
Nom du fichier : HamApps_Databases_2017.11.23_Setup.exe
Ratio de détection : 0 / 68
Date d'analyse : 2017-11-23 07:13:13 UTC (il y a 3 semaines) Voir les derniers
Antivirus Résultat Mise à jour
Ad-Aware 20171123
AegisLab 20171123
AhnLab-V3 20171123
Alibaba 20171123
ALYac 20171123
Antiy-AVL 20171123
Arcabit 20171123
Avast 20171123
Avast-Mobile 20171123
AVG 20171123
Avira (no cloud) 20171123
AVware 20171123
Baidu 20171123
BitDefender 20171123
Bkav 20171123
CAT-QuickHeal 20171122
ClamAV 20171123
CMC 20171122
Comodo 20171123
CrowdStrike Falcon (ML) 20171016
Cybereason 20171103
Cylance 20171123
Cyren 20171123
DrWeb 20171123
eGambit 20171123
Emsisoft 20171123
Endgame 20171024
ESET-NOD32 20171123
F-Prot 20171123
F-Secure 20171123
Fortinet 20171123
GData 20171123
Ikarus 20171122
Sophos ML 20170914
Jiangmin 20171123
K7AntiVirus 20171123
K7GW 20171123
Kaspersky 20171123
Kingsoft 20171123
Malwarebytes 20171123
MAX 20171123
McAfee 20171123
McAfee-GW-Edition 20171123
Microsoft 20171123
eScan 20171123
NANO-Antivirus 20171123
nProtect 20171123
Palo Alto Networks (Known Signatures) 20171123
Panda 20171122
Qihoo-360 20171123
Rising 20171123
SentinelOne (Static ML) 20171113
Sophos AV 20171123
SUPERAntiSpyware 20171123
Symantec 20171123
Symantec Mobile Insight 20171122
Tencent 20171123
TheHacker 20171121
TotalDefense 20171123
TrendMicro 20171123
TrendMicro-HouseCall 20171123
Trustlook 20171123
VBA32 20171122
VIPRE 20171123
ViRobot 20171123
Webroot 20171123
WhiteArmor 20171104
Yandex 20171120
Zillya 20171122
ZoneAlarm by Check Point 20171123
Zoner 20171123
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright © 2017, HamApps by VK3AMA

Product HamApps Databases 2017.11.23
File version 2017.11.23
Description HamApps Databases 2017.11.23 Setup
Comments This installation was built with Inno Setup.
Packers identified
F-PROT INNO, appended
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 1992-06-19 22:22:17
Entry Point 0x0000AA98
Number of sections 8
PE sections
Overlays
MD5 4280889ae3637f2c972f6272a570e697
File type data
Offset 128512
Size 8201942
Entropy 8.00
PE imports
LookupPrivilegeValueA
RegCloseKey
OpenProcessToken
RegQueryValueExA
AdjustTokenPrivileges
RegOpenKeyExA
InitCommonControls
GetSystemTime
GetLastError
GetEnvironmentVariableA
GetStdHandle
EnterCriticalSection
GetUserDefaultLangID
GetSystemInfo
GetFileAttributesA
GetExitCodeProcess
ExitProcess
CreateDirectoryA
VirtualProtect
GetVersionExA
RemoveDirectoryA
RtlUnwind
LoadLibraryA
GetACP
DeleteCriticalSection
GetCurrentProcess
SizeofResource
GetLocaleInfoA
LocalAlloc
LockResource
IsDBCSLeadByte
DeleteFileA
GetWindowsDirectoryA
GetSystemDefaultLCID
SetErrorMode
MultiByteToWideChar
GetCommandLineA
GetProcAddress
FormatMessageA
SetFilePointer
RaiseException
WideCharToMultiByte
GetModuleHandleA
ReadFile
InterlockedExchange
WriteFile
CloseHandle
GetSystemDirectoryA
GetFullPathNameA
LocalFree
CreateProcessA
GetModuleFileNameA
InitializeCriticalSection
LoadResource
VirtualQuery
VirtualFree
TlsGetValue
Sleep
GetFileType
SetEndOfFile
TlsSetValue
CreateFileA
GetVersion
FindResourceA
VirtualAlloc
GetFileSize
SetLastError
LeaveCriticalSection
SysStringLen
SysAllocStringLen
VariantCopyInd
VariantClear
VariantChangeTypeEx
CharPrevA
CreateWindowExA
LoadStringA
DispatchMessageA
CallWindowProcA
MessageBoxA
PeekMessageA
SetWindowLongA
MsgWaitForMultipleObjects
TranslateMessage
ExitWindowsEx
DestroyWindow
Number of PE resources by type
RT_ICON 7
RT_STRING 6
RT_MANIFEST 1
RT_RCDATA 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
ENGLISH US 10
NEUTRAL 7
PE resources
ExifTool file metadata
UninitializedDataSize
0

Comments
This installation was built with Inno Setup.

LinkerVersion
2.25

ImageVersion
6.0

FileSubtype
0

FileVersionNumber
2017.11.23.0

LanguageCode
Neutral

FileFlagsMask
0x003f

CharacterSet
Unicode

InitializedDataSize
86016

EntryPoint
0xaa98

MIMEType
application/octet-stream

LegalCopyright
Copyright 2017, HamApps by VK3AMA

FileVersion
2017.11.23

TimeStamp
1992:06:19 23:22:17+01:00

FileType
Win32 EXE

PEType
PE32

SubsystemVersion
4.0

ProductVersion
2017.11.23

FileDescription
HamApps Databases 2017.11.23 Setup

OSVersion
1.0

FileOS
Win32

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CompanyName
HamApps by VK3AMA

CodeSize
41472

ProductName
HamApps Databases 2017.11.23

ProductVersionNumber
2017.11.23.0

FileTypeExtension
exe

ObjectFileType
Executable application

File identification
MD5 e09d2ae7ca3cbfe3950be7060456dd65
SHA1 51d8a0cbbfc18cd49817aeeb83a0d181e127ec18
SHA256 44f2764d26c09daaed6f90f6905d1be5e79f64f5de017ae26ec5da90f6ca9283
ssdeep
196608:RSAn3a8EldAzcg29QY0fSMiDbsNBkLj4XtGPqMXcAsj9eS:IAn3TElPg29QY0fSMMbsjMY8CpeS

authentihash 4447eab75984e0277b0dd1ca8ada56b6ea9e9c537fa198892dd1355a90e680a6
imphash 2fb819a19fe4dee5c03e8c6a79342f79
File size 7.9 MB ( 8330454 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID Inno Setup installer (81.5%)
Win32 Executable Delphi generic (10.5%)
Win32 Executable (generic) (3.3%)
Win16/32 Executable Delphi generic (1.5%)
Generic Win/DOS Executable (1.4%)
Tags
peexe overlay

VirusTotal metadata
First submission 2017-11-23 07:13:13 UTC (il y a 3 semaines)
Last submission 2017-12-05 19:11:30 UTC (il y a 1 semaine, 2 jours)
Noms du fichier HamApps_Databases_2017.11.23_Setup.exe
HamApps_Databases_2017.11.23_Setup.exe
HamApps_Databases_2017.11.23_Setup.exe
Aucun commentaire. Aucun membre de la communauté VirusTotal n'a encore commenté cet élément, soyez le premier à le faire !

Laissez votre commentaire...

?
Poster un commentaire

Vous n'êtes pas connecté. Seuls les utilisateurs enregistrés peuvent laisser des commentaires, connectez-vous pour commenter !

Aucun vote. Personne n'a encore voté pour cet élément, soyez le premier à le faire !
Condensed report! The following is a condensed report of the behaviour of the file when executed in a controlled environment. The actions and events described were either performed by the file itself or by any other process launched by the executed file or subjected to code injection by the executed file.
Opened files
Read files
Created mutexes
Runtime DLLs
UDP communications