home

2.dll 重新註冊.exe

Project1

Hollings

Publisher:
Hollings

Product:
Project1

Version:
1.00

MD5:
b082f243c7a680ddda3a50648c8b9b4e

SHA-1:
f0e2db4bb4e4b28fb8d0f745c2cc49b03d1f3844

SHA-256:
124cff1f09d0f1ec8a7fc9ec7f91462836bf502c9d7c44b60327ee4f87db896f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:39:26 AM UTC  (today)

File size:
20 KB (20,480 bytes)

Product version:
1.00

Original file name:
重新Reg DLL.exe

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
10/22/2007 10:23:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
96:edVMUCiRSZCsqqzjHCczS0Ni38wNw72XA79ExxUC:QYTjHvd835G2kEo

Entry address:
0x119C

Entry point:
68, AC, 17, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 4F, 7C, 0A, 9A, AE, 27, 36, 47, 9B, 52, C8, 21, 63, 6B, DF, 7C, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 30, 32, 30, 34, 33, 30, 50, 72, 6F, 6A, 65, 63, 74, 31, 00, 30, 2D, 43, 30, 30, 30, 2D, 00, 00, 00, 00, FF, CC, 31, 00, 02, C0, FD, F3, 37, EC, 3F, F9, 4A, 8C, B6, 6F, 02, 18, A6, BC, 2F, 6A, D8, 36, AE, A5, 7D, FC, 45, 85, DB, F7, 1B, 72, 72, 35, B7, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
2.0431

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
8 KB (8,192 bytes)

The file 2.dll 重新註冊.exe has been seen being distributed by the following URL.

http://dc384.4shared.com/download/.../read_Reg_DLL.exe

Scan 2.dll 重新註冊.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.