freeisoburner.exe

MD5:
c8c8f5e93389827354ed7681e2db7cfe

SHA-1:
d3f5d4ca4133d0b0fd88373e83d721726511f8b7

SHA-256:
fcbc408a8f2f7537c9e457be3f63f5ff7a1853d34e66c799502a86349c693619

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/2/2024 11:30:13 AM UTC  (today)

Scan engine
Detection
Engine version

ViRobot
Backdoor.Win32.A.Ceckno.821248
2011.4.7.4223

File size:
802 KB (821,248 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
1/10/2011 10:25:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:CTvFP/j1BDKRDAzOZjwTj7fZuwx8qCYpj8Udm5iVhRjYn6TYh9y888888888888B:kp71otAzOZET3fEwuqrjbHVDK6TY

Entry address:
0x99868

Entry point:
55, 8B, EC, 83, C4, F0, B8, D8, 81, 49, 00, E8, 40, E1, F6, FF, A1, F0, FB, 49, 00, 8B, 00, E8, 00, 87, FE, FF, A1, F0, FB, 49, 00, 8B, 00, B2, 01, E8, 6E, A2, FE, FF, A1, F0, FB, 49, 00, 8B, 00, BA, D8, 98, 49, 00, E8, 71, 81, FE, FF, 8B, 0D, 58, FD, 49, 00, A1, F0, FB, 49, 00, 8B, 00, 8B, 15, 50, 64, 49, 00, E8, E1, 86, FE, FF, A1, F0, FB, 49, 00, 8B, 00, E8, 25, 88, FE, FF, E8, 8C, B2, F6, FF, B0, 04, 02, 00, FF, FF, FF, FF, 0F, 00, 00, 00, 46, 00, 72, 00, 65, 00, 65, 00, 20, 00, 49, 00, 53, 00, 4F, 00...
 
[+]

Entropy:
6.6645

Developed / compiled with:
Microsoft Visual C++

Code size:
608 KB (622,592 bytes)

The file freeisoburner.exe has been seen being distributed by the following 25 URLs.

http://dpcdn-s03.pl/.../FreeISOBurner_1.2(dobreprogramy.pl).exe

http://123.briian.com/forum.php?mod=attachment&aid=NTI5NHxhZDQwZjU1NnwxNDUzOTgxMzE4fDB8MzEyNA==

http://dpcdn-s11q.pl/.../FreeISOBurner_1.2(dobreprogramy.pl).exe

ftp://192.168.0.149/ftp_tools/isupport/Tools/Others/.../FreeISOBurner.exe

http://storage.dobreprogramy.pl/.../FreeISOBurner_1.2(dobreprogramy.pl).exe

http://123.briian.com/forum.php?mod=attachment&aid=NTI5NHw1ODVlYjVhYnwxNDczMDYzNTIwfDB8MzEyNA==

http://dpcdn-s11.pl/.../FreeISOBurner_1.2(dobreprogramy.pl).exe

http://storage.programosy.pl/FreeISOBurner_1.2_[www.programosy.pl].exe

Scan freeisoburner.exe - Powered by Reason Core Security