ic2-(mod-na-zbrane).exe

WindowsFormsApplication1

Hewlett-Packard

This is a setup program which is used to install the application. The file has been seen being downloaded from freecache32-free.uloz.to.
Publisher:
Hewlett-Packard

Product:
WindowsFormsApplication1

Version:
1.0.0.0

MD5:
b1cafbb3bf224355cb51be83924238d8

SHA-1:
5cdc3945918e6d44f741b652964266a528df3d09

SHA-256:
95d1a2ec7d218cc123e813ac6bcd2e5f68fe6f1fcedf7a19dfcb853b4678bc5b

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/27/2024 1:20:17 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/PSW.CardGen.C
7.11.77.214

McAfee
Artemis!B1CAFBB3BF22
5600.7049

Trend Micro House Call
TROJ_GEN.R47H1DI
7.2.215

File size:
308 KB (315,392 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Hewlett-Packard 2012

Original file name:
IC2_two.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ic2-(mod-na-zbrane).exe

File PE Metadata
Compilation timestamp:
3/1/2013 1:08:10 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:gRTyqszsSqdXrrxjsEKLEn3AJKF9lqszsSqdXrhxjsEKL8n:gxyzzsbd5cIAJKFvzzsbd3c

Entry address:
0x2C93E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
170.5 KB (174,592 bytes)

The file ic2-(mod-na-zbrane).exe has been seen being distributed by the following URL.

Scan ic2-(mod-na-zbrane).exe - Powered by Reason Core Security