| SHA256: | 7d3ba8616b5707dbec2c83921d98bea6633e818333e84efff27bf9374fc2075b |
| Назва файлу: | Panda Smart Browser.exe |
| Співвідношення виявлення: | 0 / 57 |
| Дата дослідження: | 2015-04-17 17:09:50 UTC ( 3 роки тому ) Переглянути останні |
| Противірус | Підсумок | Оновлення |
|---|---|---|
| Ad-Aware | 20150417 | |
| AegisLab | 20150417 | |
| Yandex | 20150417 | |
| AhnLab-V3 | 20150417 | |
| Alibaba | 20150417 | |
| ALYac | 20150417 | |
| Antiy-AVL | 20150417 | |
| Avast | 20150417 | |
| AVG | 20150417 | |
| Avira (no cloud) | 20150417 | |
| AVware | 20150417 | |
| Baidu-International | 20150417 | |
| BitDefender | 20150417 | |
| Bkav | 20150417 | |
| ByteHero | 20150417 | |
| CAT-QuickHeal | 20150417 | |
| ClamAV | 20150417 | |
| CMC | 20150416 | |
| Comodo | 20150417 | |
| Cyren | 20150417 | |
| DrWeb | 20150417 | |
| Emsisoft | 20150417 | |
| ESET-NOD32 | 20150417 | |
| F-Prot | 20150417 | |
| F-Secure | 20150417 | |
| Fortinet | 20150417 | |
| GData | 20150417 | |
| Ikarus | 20150417 | |
| Jiangmin | 20150414 | |
| K7AntiVirus | 20150417 | |
| K7GW | 20150417 | |
| Kaspersky | 20150417 | |
| Kingsoft | 20150417 | |
| Malwarebytes | 20150417 | |
| McAfee | 20150417 | |
| McAfee-GW-Edition | 20150417 | |
| Microsoft | 20150419 | |
| eScan | 20150417 | |
| NANO-Antivirus | 20150417 | |
| Norman | 20150417 | |
| nProtect | 20150417 | |
| Panda | 20150417 | |
| Qihoo-360 | 20150417 | |
| Rising | 20150417 | |
| Sophos AV | 20150417 | |
| SUPERAntiSpyware | 20150417 | |
| Symantec | 20150417 | |
| Tencent | 20150417 | |
| TheHacker | 20150417 | |
| TotalDefense | 20150417 | |
| TrendMicro | 20150417 | |
| TrendMicro-HouseCall | 20150417 | |
| VBA32 | 20150417 | |
| VIPRE | 20150417 | |
| ViRobot | 20150417 | |
| Zillya | 20150417 | |
| Zoner | 20150417 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright © 2012
Original name Bot.exe
Internal name Bot.exe
File version 4.0.0.0
Description
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2015-03-15 16:47:12
Entry Point 0x00739EDE
Number of sections 3
.NET details
Module Version ID
a731cbda-f284-4de5-bfa8-713cfb57731b
PE sections
Overlays
MD5 850d3b480becb308450967de7b219388
File type data
Offset 7629824
Size 7278590
Entropy 8.00
PE imports
Number of PE resources by type
RT_ICON 14
RT_GROUP_ICON 2
RT_MANIFEST 1
RT_VERSION 1
Number of PE resources by language
NEUTRAL 18
PE resources
ExifTool file metadata
UninitializedDataSize
0
LinkerVersion
8.0
ImageVersion
0.0
FileVersionNumber
4.0.0.0
LanguageCode
Neutral
FileFlagsMask
0x003f
CharacterSet
Unicode
InitializedDataSize
59904
EntryPoint
0x739ede
OriginalFileName
Bot.exe
MIMEType
application/octet-stream
LegalCopyright
Copyright 2012
FileVersion
4.0.0.0
TimeStamp
2015:03:15 17:47:12+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
Bot.exe
ProductVersion
4.0.0.0
SubsystemVersion
4.0
OSVersion
4.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CodeSize
7569408
FileSubtype
0
ProductVersionNumber
4.0.0.0
FileTypeExtension
exe
ObjectFileType
Executable application
AssemblyVersion
4.0.0.0
File identification
MD5 d5f0e968de0d92beff8f0c50e1a1dd50
SHA1 5e63c576691b5f7abd4db5b4800f8c06332393c4
SHA256 7d3ba8616b5707dbec2c83921d98bea6633e818333e84efff27bf9374fc2075b
ssdeep
196608:j5bZFcLfLF+wO50comr/dIsqfYFQICKVumshKslfhoNnYJ/1FKbfOAOvpAg+c:j/FcdZO5sBsqAFQICK8msRwYRGbcpA6
Розмір файлу
14.2 Мб ( 14908414 bytes )
Тип файлу Win32 EXE
Чарівні букви
PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
| TrID |
Win64 Executable (generic) (49.4%) Windows screen saver (23.4%) Win32 Dynamic Link Library (generic) (11.7%) Win32 Executable (generic) (8.0%) Generic Win/DOS Executable (3.5%) |
Tags
peexe
assembly
overlay
VirusTotal metadata
First submission
2015-04-17 17:09:50 UTC ( 3 роки тому )
Last submission
2015-04-17 17:09:50 UTC ( 3 роки тому )
| Назви файлів |
Panda Smart Browser.exe Bot.exe |
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the
scanned file presents certain characteristics which depending on the
user policies and environment may or may not represent a threat. For
full details see:
https://www.clamav.net/documents/potentially-unwanted-applications-pua
.
Symantec reputation
Suspicious.Insight
Немає дописів.
Жоден член VirusTotal Спільноти ще не писав з цього приводу, Ви можете стати першим, хто зробить це!
Ви не ввійшли в систему. Лише зареєстровані користувачі можуть залишати дописи, увійдіть для отримання прав!
Немає голосів.
Наразі ніхто не проголосував з цього приводу, Ви можете стати першим, хто зробить це!