home

Multi PKG tool.exe

Multi PKG tool

PsDev

Publisher:
PsDev

Product:
Multi PKG tool

Version:
1.0.0.1

MD5:
e427c1e75fea34e0dec641b6c4ea36b3

SHA-1:
f5b6e0568872c3967250001f5dad0ad9fe4001f1

SHA-256:
7871349bb4da0826df16ef1b3a2c02ac13e5fb369c7d2a36aa2efb2cc4de9a14

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 5:19:08 AM UTC  (today)

Scan engine
Detection
Engine version

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
35598

File size:
477 KB (488,448 bytes)

Product version:
1.0.0.1

Copyright:
Copyright © PsDev 2012

Original file name:
Multi PKG tool.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\multi pkg tool.exe

File PE Metadata
Compilation timestamp:
3/18/2012 6:36:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:Br/Fw8bsdYrYdYr4TT687QCWahIpY+8wETCTTT687QCWahIpY+8wET:1FdbR94TG8RWaqpY+7hTTG8RWaqpY+7

Entry address:
0x4A7EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 88, 00, 00, 80, 10, 00, 00, 00, A0, 00, 00, 80, 18, 00, 00, 00, B8, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 09, 00, 02, 00, 00, 00, D0, 00, 00, 80, 03, 00, 00, 00, E8, 00, 00, 80, 04, 00, 00, 00, 00, 01, 00, 80, 05, 00, 00, 00, 18, 01, 00, 80, 06, 00, 00, 00, 30, 01, 00, 80, 07, 00, 00, 00, 48, 01...
 
[+]

Entropy:
5.3220

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
290 KB (296,960 bytes)

The file Multi PKG tool.exe has been seen being distributed by the following 2 URLs.

http://download941.mediafire.com/ocx6yusg26ag/.../Multi PKG tool.exe

http://download1921.mediafire.com/pp3jnvq6ck1g/.../Multi PKG tool.exe

Scan Multi PKG tool.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.