| SHA256: | e68e116a69fd127b9434f29d5a13d9b9e4bd60d2caaa6493ace3fc6953cdf3b3 |
| Nazwa pliku: | followersfetcher.exe |
| Współczynnik wykrycia: | 0 / 43 |
| Data analizy: | 2012-02-04 06:01:01 UTC ( 5 lat, 7 miesięcy temu ) Zobacz najnowsze |
| Antywirus | Wynik | Uaktualnij |
|---|---|---|
| AhnLab-V3 | 20120203 | |
| AntiVir | 20120203 | |
| Antiy-AVL | 20120203 | |
| Avast | 20120203 | |
| AVG | 20120204 | |
| BitDefender | 20120204 | |
| ByteHero | 20120126 | |
| CAT-QuickHeal | 20120203 | |
| ClamAV | 20120204 | |
| Commtouch | 20120204 | |
| Comodo | 20120203 | |
| DrWeb | 20120204 | |
| Emsisoft | 20120204 | |
| eSafe | 20120202 | |
| eTrust-Vet | 20120203 | |
| F-Prot | 20120201 | |
| F-Secure | 20120204 | |
| Fortinet | 20120204 | |
| GData | 20120204 | |
| Ikarus | 20120204 | |
| Jiangmin | 20120203 | |
| K7AntiVirus | 20120203 | |
| Kaspersky | 20120204 | |
| McAfee | 20120204 | |
| McAfee-GW-Edition | 20120203 | |
| Microsoft | 20120204 | |
| NOD32 | 20120204 | |
| Norman | 20120203 | |
| nProtect | 20120203 | |
| Panda | 20120203 | |
| PCTools | 20120204 | |
| Prevx | 20120204 | |
| Rising | 20120118 | |
| Sophos AV | 20120204 | |
| SUPERAntiSpyware | 20120203 | |
| Symantec | 20120204 | |
| TheHacker | 20120203 | |
| TrendMicro | 20120204 | |
| TrendMicro-HouseCall | 20120204 | |
| VBA32 | 20120203 | |
| VIPRE | 20120204 | |
| ViRobot | 20120204 | |
| VirusBuster | 20120203 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
File version 3, 3, 6, 1
Packers identified
F-PROT AutoIt, UTF-8, UPX
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2010-04-16 07:47:33
Entry Point 0x000DFBE0
Number of sections 3
PE sections
Overlays
MD5 450e3a78c389d23b61fc37f91a3ae681
File type data
Offset 460800
Size 230727
Entropy 8.00
PE imports
Number of PE resources by type
RT_ICON 18
RT_STRING 7
RT_GROUP_ICON 4
RT_DIALOG 1
RT_MANIFEST 1
RT_MENU 1
RT_VERSION 1
Number of PE resources by language
ENGLISH UK 31
ENGLISH US 2
PE resources
ExifTool file metadata
UninitializedDataSize
643072
InitializedDataSize
192512
ImageVersion
0.0
FileVersionNumber
3.3.6.1
LanguageCode
English (British)
FileFlagsMask
0x0017
CharacterSet
Unicode
LinkerVersion
9.0
FileTypeExtension
exe
MIMEType
application/octet-stream
FileVersion
3, 3, 6, 1
TimeStamp
2010:04:16 08:47:33+01:00
FileType
Win32 EXE
PEType
PE32
SubsystemVersion
5.0
OSVersion
5.0
FileOS
Win32
Subsystem
Windows GUI
CompiledScript
AutoIt v3 Script: 3, 3, 6, 1
MachineType
Intel 386 or later, and compatibles
CodeSize
270336
FileSubtype
0
ProductVersionNumber
3.3.6.1
EntryPoint
0xdfbe0
ObjectFileType
Unknown
Compressed bundles
File identification
MD5 6f82420f23f51dd4e41fd4fcbd6a8a7b
SHA1 a8062036a4f369bf17936418cde5c88fa09fd669
SHA256 e68e116a69fd127b9434f29d5a13d9b9e4bd60d2caaa6493ace3fc6953cdf3b3
ssdeep
12288:wjkArEN249AyE/rbaMct4bO2/VtKhOjMOjvARZqrJJjJNS4IKL4/0I0y8:rFE//Tct4bOsShOgO8RAJU4IKSH0y8
File size
675.3 KB ( 691527 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
UPX compressed Win32 Executable (42.3%) Win32 EXE Yoda's Crypter (36.7%) Win32 Dynamic Link Library (generic) (9.1%) Win32 Executable (generic) (6.2%) Generic Win/DOS Executable (2.7%) |
Tags
peexe
upx
overlay
VirusTotal metadata
First submission
2012-02-04 06:01:01 UTC ( 5 lat, 7 miesięcy temu )
Last submission
2013-02-24 01:13:55 UTC ( 4 lata, 7 miesięcy temu )
| Nazwy plików |
followersfetcher.exe file-4844322_exe smona_e68e116a69fd127b9434f29d5a13d9b9e4bd60d2caaa6493ace3fc6953cdf3b3.bin |
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the
scanned file presents certain characteristics which depending on the
user policies and environment may or may not represent a threat. For
full details see:
https://www.clamav.net/documents/potentially-unwanted-applications-pua
.
Symantec reputation
Suspicious.Insight
Brak komentarzy.
Żaden z członków społeczności VirusTotal nie skomentował tego. Bądź pierwszy, by to zrobić!
Nie jesteś zalogowany. Tylko zarejestrowani użytkownicy mogą dodawać komentarze, zalogować się i mieć swój głos!
Brak ocen.
Nikt jeszcze nie oddał swojego głosu, bądź pierwszy!