home

bita691.tmp

MD5:
3bf5c7123daabfa20257633b0c7329f4

SHA-1:
799dd3cd9490ce438fdf26d01eb0ba253754f694

SHA-256:
f9af1a4809fd50a3cd6556e666dffe20b319e5d60ba6bd63b705f311fce43f74

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/1/2025 8:13:51 PM UTC  (today)

Scan engine
Detection
Engine version

Kaspersky
not-a-virus:AdWare.Win32.Adposhel
15.0.2.529

File size:
4.5 MB (4,706,304 bytes)

Common path:
C:\ProgramData\4d6ab76f-5337-0\bita691.tmp

File PE Metadata
Compilation timestamp:
12/25/2016 7:41:18 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.10

Entry address:
0x3D486

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, B9, 04, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, BE, FE, FF, FF, 83, C4, 0C, 5D, C2, 0C, 00, FF, 25, B8, E3, EE, 1E, CC, 28, 39, CB, E9, 3D, 87, 3D, 07, 7B, 6D, 5D, FC, EB, CC, EA, B4, F6, F5, 49, 56, 51, 12, 52, FD, DC, BD, 63, 1E, 42, 08, D0, 33, EA, 83, 6E, D1, 0E, 45, B5, 54, 5C, 00, 30, 52, DF, D8, 59, F1, 16, 3E, 74, 6D, E8, 36, 8E, 39, 86, 40, 72, 37, A3, 45, 6A, FE, D0, 3E, 5A, 9B, 76, 47, 7A, 89, 8E, 6F, A0, C7, 97, 26, BA, 25, 45, 61, B0, FD, DB, 06...
 
[+]

Entropy:
1.1179

Developed / compiled with:
Microsoft Visual C++

Code size:
499.5 KB (511,488 bytes)

Scan bita691.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.