× Cookies被禁用! 本网站需要启用Cookie才能正常工作
SHA256: 30ca12675cad8d88db35196a3a674a7222e73f727989db8fa63413bc04a513a8
文件名: Maryfi-ES.exe
检出率: 0 / 56
分析日期: 2015-08-16 18:39:47 UTC ( 3 年, 9 月 前 ) 查看最新
反病毒软件 结果 病毒库日期
Ad-Aware 20150816
AegisLab 20150816
Yandex 20150816
AhnLab-V3 20150816
Alibaba 20150814
ALYac 20150813
Antiy-AVL 20150816
Arcabit 20150816
Avast 20150816
AVG 20150816
Avira (no cloud) 20150816
AVware 20150816
Baidu-International 20150816
BitDefender 20150816
Bkav 20150815
ByteHero 20150816
CAT-QuickHeal 20150814
ClamAV 20150816
CMC 20150814
Comodo 20150816
Cyren 20150816
DrWeb 20150816
Emsisoft 20150816
ESET-NOD32 20150816
F-Prot 20150816
F-Secure 20150815
Fortinet 20150813
GData 20150816
Ikarus 20150816
Jiangmin 20150815
K7AntiVirus 20150816
K7GW 20150816
Kaspersky 20150816
Kingsoft 20150816
Malwarebytes 20150816
McAfee 20150816
McAfee-GW-Edition 20150816
Microsoft 20150816
eScan 20150816
NANO-Antivirus 20150816
nProtect 20150813
Panda 20150816
Qihoo-360 20150816
Rising 20150816
Sophos AV 20150816
SUPERAntiSpyware 20150815
Symantec 20150816
Tencent 20150816
TheHacker 20150814
TrendMicro 20150816
TrendMicro-HouseCall 20150816
VBA32 20150815
VIPRE 20150816
ViRobot 20150816
Zillya 20150816
Zoner 20150816
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright (C) 2015 MarySoft

Publisher MarySoft
Product Maryfi - Spanish
Original name Maryfi-ES.exe
Internal name Maryfi-ES
File version 1.1.0
Description This installer database contains the logic and data required to install Maryfi - Spanish.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2014-03-13 13:38:38
Entry Point 0x000C1D6A
Number of sections 5
PE sections
Overlays
MD5 f3ebaeb0a0497ce43fc8a193c2656166
File type application/x-ms-dos-executable
Offset 1522176
Size 1224183
Entropy 7.96
PE imports
RegCreateKeyExW
RegDeleteKeyA
RegCloseKey
LookupAccountSidW
RegQueryValueExA
OpenServiceW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteKeyW
RegCreateKeyA
UnlockServiceDatabase
RegQueryValueExW
SetSecurityDescriptorDacl
CloseServiceHandle
RegOpenKeyA
EqualSid
OpenProcessToken
QueryServiceStatus
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueA
GetTokenInformation
GetUserNameW
RegQueryInfoKeyW
GetSecurityDescriptorDacl
RegDeleteValueW
LockServiceDatabase
RegEnumKeyExW
SetEntriesInAclW
StartServiceW
RegSetValueExW
FreeSid
OpenSCManagerW
AllocateAndInitializeSid
InitializeSecurityDescriptor
RegSetValueExA
RegDeleteValueA
InitCommonControlsEx
ImageList_Destroy
_TrackMouseEvent
ImageList_AddMasked
ImageList_SetBkColor
ImageList_ReplaceIcon
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_Create
PropertySheetW
ImageList_GetIcon
ImageList_LoadImageW
ImageList_Add
GetSaveFileNameW
GetOpenFileNameW
CreatePolygonRgn
CreateFontIndirectW
CreatePen
GetRgnBox
CreateRectRgnIndirect
CombineRgn
GetBitmapBits
Rectangle
GetLayout
GetBrushOrgEx
ExcludeClipRect
CreateCompatibleDC
DeleteDC
SetBkMode
GetObjectW
BitBlt
CreateDIBSection
CreateBitmapIndirect
SetTextColor
CreatePatternBrush
GetDeviceCaps
FillRgn
ExtTextOutW
EqualRgn
GetStockObject
SelectClipRgn
SetViewportOrgEx
CreateFontW
SetBrushOrgEx
CreateRectRgn
SelectObject
CreateSolidBrush
SetBkColor
DeleteObject
CreateCompatibleBitmap
GetStdHandle
GetDriveTypeW
GetConsoleOutputCP
SetEvent
HeapDestroy
GetFileAttributesW
DuplicateHandle
GetLocalTime
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
GetLocaleInfoA
LocalAlloc
LoadLibraryExW
FreeEnvironmentStringsW
GetLocaleInfoW
SetStdHandle
GetTempPathA
GetCPInfo
GetProcAddress
GetStringTypeA
InterlockedExchange
WriteFile
WaitForSingleObject
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
GetOEMCP
LocalFree
FormatMessageW
ConnectNamedPipe
GetExitCodeProcess
InitializeCriticalSection
OutputDebugStringW
GetLogicalDriveStringsW
FindClose
TlsGetValue
MoveFileW
SetFileAttributesW
GetEnvironmentVariableW
SetLastError
PeekNamedPipe
CopyFileW
GetUserDefaultLangID
LoadResource
GetModuleFileNameW
IsDebuggerPresent
HeapAlloc
GetModuleFileNameA
LoadLibraryA
EnumSystemLocalesA
EnumResourceLanguagesW
UnhandledExceptionFilter
InterlockedDecrement
MultiByteToWideChar
FlushInstructionCache
SetFilePointer
GetFullPathNameW
CreateThread
GetSystemDirectoryW
GetExitCodeThread
SetUnhandledExceptionFilter
MulDiv
IsProcessorFeaturePresent
GlobalMemoryStatus
SearchPathW
WriteConsoleA
SetCurrentDirectoryW
GlobalAlloc
GetDiskFreeSpaceExW
SetEndOfFile
GetVersion
LeaveCriticalSection
WriteConsoleW
CreateToolhelp32Snapshot
InitializeCriticalSectionAndSpinCount
HeapFree
EnterCriticalSection
GetSystemTime
SetHandleCount
TerminateThread
LoadLibraryW
GetVersionExW
FreeLibrary
QueryPerformanceCounter
GetTickCount
SetConsoleTextAttribute
TlsAlloc
FlushFileBuffers
lstrcmpiW
RtlUnwind
GetStartupInfoA
UnlockFile
GetWindowsDirectoryW
GetFileSize
OpenProcess
DeleteFileA
GetStartupInfoW
CreateDirectoryW
DeleteFileW
GlobalLock
GetConsoleScreenBufferInfo
GetSystemInfo
GetProcessHeap
GetTempFileNameW
CompareStringW
RemoveDirectoryW
FindNextFileW
ResetEvent
GetTempFileNameA
FindFirstFileW
IsValidLocale
lstrcmpW
WaitForMultipleObjects
GetUserDefaultLCID
GetTempPathW
CreateEventW
CreateFileW
GetFileType
TlsSetValue
CreateFileA
ExitProcess
InterlockedIncrement
GetLastError
LCMapStringW
GetShortPathNameW
CreateNamedPipeW
GlobalFree
GetConsoleCP
FindResourceW
LCMapStringA
GetEnvironmentStringsW
GlobalUnlock
LockFile
lstrlenW
Process32NextW
CreateProcessW
SizeofResource
GetCurrentProcessId
LockResource
GetCommandLineW
WideCharToMultiByte
HeapSize
InterlockedCompareExchange
Process32FirstW
GetCurrentThread
lstrcpynW
GetSystemDefaultLangID
RaiseException
TlsFree
GetModuleHandleA
ReadFile
CloseHandle
GetACP
GetModuleHandleW
GetCurrentThreadId
FindResourceExW
CreateProcessA
IsValidCodePage
HeapCreate
OpenEventW
VirtualFree
Sleep
TerminateProcess
VirtualAlloc
TransparentBlt
AlphaBlend
NetUserGetLocalGroups
LoadRegTypeLib
OleCreateFontIndirect
SysStringLen
SysAllocStringLen
SysStringByteLen
VariantClear
SysAllocString
VariantCopy
VariantInit
VarDateFromStr
LoadTypeLib
SysFreeString
SysAllocStringByteLen
OleLoadPicture
VarUI4FromStr
SHGetFolderPathW
SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetFileInfoW
SHGetMalloc
PathAddBackslashW
PathIsUNCW
PathIsDirectoryW
PathFileExistsW
SetFocus
GetMessagePos
SetWindowRgn
RedrawWindow
LoadBitmapW
SetRectEmpty
DestroyMenu
PostQuitMessage
GetForegroundWindow
DrawStateW
SetWindowPos
GetNextDlgTabItem
IsWindow
EndPaint
IntersectRect
DispatchMessageW
GetAsyncKeyState
ReleaseDC
GetDlgCtrlID
SendMessageW
UnregisterClassA
SendMessageA
GetClientRect
DrawTextW
SetScrollPos
LoadImageW
ClientToScreen
GetActiveWindow
GetWindowTextW
GetWindowTextLengthW
MsgWaitForMultipleObjects
InvalidateRgn
DestroyWindow
DrawEdge
GetParent
UpdateWindow
GetPropW
EqualRect
EnumWindows
GetMessageW
ShowWindow
DrawFrameControl
SetPropW
GetDesktopWindow
PeekMessageW
EnableWindow
GetSystemMenu
TranslateMessage
IsWindowEnabled
GetWindow
GetIconInfo
SetClipboardData
IsZoomed
LoadStringW
EnableMenuItem
DrawFocusRect
SetTimer
IsDialogMessageW
FillRect
CreateAcceleratorTableW
GetSysColorBrush
CreateWindowExW
GetWindowLongW
CharNextW
IsChild
MapWindowPoints
RegisterWindowMessageW
GetMonitorInfoW
EmptyClipboard
BeginPaint
OffsetRect
DefWindowProcW
GetScrollPos
KillTimer
TrackMouseEvent
GetComboBoxInfo
GetClassInfoExW
GetSystemMetrics
SetWindowLongW
GetWindowRect
InflateRect
SetCapture
ReleaseCapture
GetScrollRange
PostMessageW
EndDialog
CreateDialogParamW
CreatePopupMenu
GetSubMenu
PtInRect
DrawIconEx
SetWindowTextW
GetDlgItem
RemovePropW
FindWindowW
ScreenToClient
TrackPopupMenu
DialogBoxIndirectParamW
DestroyAcceleratorTable
ValidateRect
LoadCursorW
LoadIconW
GetDC
SetForegroundWindow
ExitWindowsEx
OpenClipboard
GetCursorPos
DrawTextExW
GetScrollInfo
CopyRect
GetCapture
MessageBeep
LoadMenuW
GetWindowThreadProcessId
MessageBoxW
RegisterClassExW
MoveWindow
DialogBoxParamW
AppendMenuW
GetWindowDC
DestroyCursor
GetFocus
GetSysColor
SetScrollInfo
GetKeyState
GetWindowRgn
DestroyIcon
IsWindowVisible
SetCursorPos
SystemParametersInfoW
UnionRect
MonitorFromWindow
SetRect
InvalidateRect
CallWindowProcW
GetClassNameW
ModifyMenuW
IsRectEmpty
SendMessageTimeoutW
CloseClipboard
SetCursor
TranslateAcceleratorW
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
SymGetLineFromAddr
StackWalk
SymSetOptions
SymCleanup
SymInitialize
SymFunctionTableAccess
SymGetModuleBase
SymSetSearchPath
CoInitializeEx
OleLockRunning
CLSIDFromString
CoInitialize
OleInitialize
StgCreateDocfileOnILockBytes
CoCreateInstance
CoTaskMemRealloc
CLSIDFromProgID
OleUninitialize
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
StringFromGUID2
CreateILockBytesOnHGlobal
CoGetClassObject
Number of PE resources by type
RT_DIALOG 13
RT_STRING 13
RT_ICON 12
RT_BITMAP 6
RTF_FILE 2
RT_MENU 2
IMAGE_FILE 2
RT_MANIFEST 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
ENGLISH US 53
PE resources
Debug information
ExifTool file metadata
SubsystemVersion
5.0

LinkerVersion
9.0

ImageVersion
0.0

FileSubtype
0

FileVersionNumber
1.1.0.0

UninitializedDataSize
0

LanguageCode
English (U.S.)

FileFlagsMask
0x003f

CharacterSet
Unicode

InitializedDataSize
506368

EntryPoint
0xc1d6a

OriginalFileName
Maryfi-ES.exe

MIMEType
application/octet-stream

LegalCopyright
Copyright (C) 2015 MarySoft

FileVersion
1.1.0

TimeStamp
2014:03:13 14:38:38+01:00

FileType
Win32 EXE

PEType
PE32

InternalName
Maryfi-ES

ProductVersion
1.1.0

FileDescription
This installer database contains the logic and data required to install Maryfi - Spanish.

OSVersion
5.0

FileOS
Win32

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CompanyName
MarySoft

CodeSize
1014784

ProductName
Maryfi - Spanish

ProductVersionNumber
1.1.0.0

FileTypeExtension
exe

ObjectFileType
Dynamic link library

File identification
MD5 b19ef312dd04e4be82aecf0e4f21ba46
SHA1 61bde44875d25631537b9ae241a2be12ea18be8c
SHA256 30ca12675cad8d88db35196a3a674a7222e73f727989db8fa63413bc04a513a8
ssdeep
49152:djKtEKs7iwmLLTWmZe2d2Rg6uHBSjUH5M8Tcr5Et0vPDD1Cn/JQU4dBjlO:djKtE17ihLTlZelO5M8TcrksdCnRQU48

authentihash 7655bde8f708d0ad716d37d606bb8edb6fe7d02224ae741064094871d589bebe
imphash 3b8e17212ad48d53a06340873151d701
File size 2.6 MB ( 2746359 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID InstallShield setup (48.1%)
Win32 Executable MS Visual C++ (generic) (34.9%)
Win32 Dynamic Link Library (generic) (7.3%)
Win32 Executable (generic) (5.0%)
Generic Win/DOS Executable (2.2%)
Tags
peexe overlay

VirusTotal metadata
First submission 2015-08-16 18:39:47 UTC ( 3 年, 9 月 前 )
Last submission 2015-08-16 18:39:47 UTC ( 3 年, 9 月 前 )
文件名 Maryfi-ES.exe
Maryfi-ES
没有评论. 没有VirusTotal社区成员评论该项目,抢沙发!

发表评论

?
发表评论

您没有登录。只有注册用户可以发表评论,请登录后发表评论!

没有投票. 目前没有用户投票。
Condensed report! The following is a condensed report of the behaviour of the file when executed in a controlled environment. The actions and events described were either performed by the file itself or by any other process launched by the executed file or subjected to code injection by the executed file.
Opened files
Read files
Written files
Runtime DLLs