| SHA256: | 90c17a1dd07536e7e23a8b0b4c2ffa681741142feae817defa973c34d4f29d01 |
| Ime datoteke: | ht5x0212c7hjs-0.tmp |
| Omjer otkrivanja: | 34 / 45 |
| Datum analize: | 2013-08-11 11:26:49 UTC (prije 4 godine) Pogledaj posljednje |
| Antivirus | Rezultat | Ažuriranje |
|---|---|---|
| Yandex | Trojan.Simda!qGtAIf4Jb/Q | 20130810 |
| AhnLab-V3 | Trojan/Win32.Spnr | 20130810 |
| AntiVir | TR/Crypt.XPACK.Gen | 20130811 |
| Avast | Win32:Trojan-gen | 20130811 |
| AVG | SHeur4.BGUK | 20130811 |
| BitDefender | Gen:Variant.Symmi.4608 | 20130811 |
| CAT-QuickHeal | Trojan.Claretore | 20130811 |
| Commtouch | W32/FraudLoad.C!Generic | 20130811 |
| Comodo | UnclassifiedMalware | 20130811 |
| DrWeb | Trojan.Rodricter.58 | 20130811 |
| Emsisoft | Gen:Variant.Symmi.4608 (B) | 20130811 |
| ESET-NOD32 | Win32/Simda.P | 20130811 |
| F-Prot | W32/FraudLoad.C!Generic | 20130811 |
| F-Secure | Gen:Variant.Symmi.15402 | 20130811 |
| Fortinet | W32/Simda.B!tr | 20130811 |
| GData | Gen:Variant.Symmi.15402 | 20130811 |
| Ikarus | Trojan.Win32.Claretore | 20130811 |
| Jiangmin | Trojan/Generic.bgxyc | 20130811 |
| K7AntiVirus | Virus | 20130809 |
| K7GW | Riskware | 20130809 |
| Kaspersky | UDS:DangerousObject.Multi.Generic | 20130811 |
| McAfee | Generic.dx!C36254EBF481 | 20130811 |
| McAfee-GW-Edition | Generic.dx!C36254EBF481 | 20130811 |
| Microsoft | Trojan:Win32/Claretore.L | 20130811 |
| eScan | Gen:Variant.Symmi.4608 | 20130811 |
| NANO-Antivirus | Trojan.Win32.Rodricter.bpcuud | 20130811 |
| Norman | Simda.TDT | 20130811 |
| Panda | Trj/OCJ.E | 20130811 |
| SUPERAntiSpyware | Trojan.Agent/Gen-Kryptik | 20130810 |
| Symantec | WS.Reputation.1 | 20130811 |
| TrendMicro | TROJ_SPNR.35E013 | 20130811 |
| TrendMicro-HouseCall | TROJ_SPNR.35E013 | 20130811 |
| VBA32 | Trojan.Bublik | 20130809 |
| VIPRE | Backdoor.Win32.Simda.b (v) | 20130811 |
| Antiy-AVL | 20130811 | |
| ByteHero | 20130804 | |
| ClamAV | 20130811 | |
| Kingsoft | 20130723 | |
| Malwarebytes | 20130811 | |
| nProtect | 20130811 | |
| PCTools | 20130811 | |
| Rising | 20130809 | |
| TheHacker | 20130810 | |
| TotalDefense | 20130809 | |
| ViRobot | 20130810 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 DLL
file
for the Windows GUI subsystem.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2008-03-26 18:34:11
Entry Point 0x0000A414
Number of sections 5
PE sections
PE imports
ExifTool file metadata
MIMEType
application/octet-stream
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
FileTypeExtension
dll
TimeStamp
2008:03:26 19:34:11+01:00
FileType
Win32 DLL
PEType
PE32
CodeSize
118784
LinkerVersion
4.0
EntryPoint
0xa414
InitializedDataSize
151552
SubsystemVersion
5.0
ImageVersion
0.0
OSVersion
5.0
UninitializedDataSize
0
File identification
MD5 c36254ebf4819085cc714442e331b6f2
SHA1 85e6b52a28589fc8afd100dfac934f4f42c0447f
SHA256 90c17a1dd07536e7e23a8b0b4c2ffa681741142feae817defa973c34d4f29d01
ssdeep
3072:wtJ03Z0OQhadMZa3BhODfRLbyEi6AHneniGIv:aJ0pbMZaxhOB6k
File size
151.0 KB ( 154624 bytes )
File type Win32 DLL
Magic literal
PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bit
| TrID |
Win32 Executable (generic) (52.9%) Generic Win/DOS Executable (23.5%) DOS Executable Generic (23.4%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) |
Tags
pedll
VirusTotal metadata
First submission
2013-04-19 17:09:25 UTC (prije 4 godine, 4 mjeseci)
Last submission
2013-08-11 11:26:49 UTC (prije 4 godine)
| Imena datoteka |
ht5x0212c7hjs-0.tmp vlsuho12a8uu6-10083.tmp |
Advanced heuristic and reputation engines
Symantec reputation
Suspicious.Insight
Nema komentara..
Nijedan član zajednice VirusTotala još nije prokomentirao ovu stavku. Budite prvi koji će to napraviti!
Niste prijavljeni. Samo registrirani korisnici mogu ostavljati komentare. Otvorite račun i razglasite se!
Nema glasova..
Još nitko nije glasovao za ovu stavku. Budite prvi koji će to napraviti!