pointblank_xigncode.exe

PointBlank XIGNCODE Hatası Çözümü

The executable pointblank_xigncode.exe has been detected as malware by 7 anti-virus scanners. The file has been seen being downloaded from dosya.co.
Product:
PointBlank XIGNCODE Hatası Çözümü

Version:
1.0.0.0

MD5:
a7afafbbcf03a61ece149ad53decfd54

SHA-1:
6f3996774d57ac1d94ed7bf8948aa55600d29f27

SHA-256:
3ccb0b36b293594d878aaa9f961a572d78dd1484199898fcc6527fe5e5a1227a

Scanner detections:
7 / 68

Status:
Malware

Analysis date:
12/25/2024 1:06:55 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dldr.Agent.jgya
8.3.3.4

avast!
Win32:Malware-gen
2014.9-160710

Dr.Web
Trojan.DownLoader12.13903
9.0.1.0192

G Data
Win32.Trojan.Agent.GHDLOI
16.7.25

IKARUS anti.virus
Trojan-Downloader.Agent
t3scan.2.1.6.0

McAfee
Artemis!A7AFAFBBCF03
5600.6343

Qihoo 360 Security
Win32/Trojan.2ca
1.0.0.1120

File size:
34 KB (34,816 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2016

Original file name:
PointBlank XIGNCODE Hatası Çözümü.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\pointblank_xigncode.exe

File PE Metadata
Compilation timestamp:
6/2/2016 6:36:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:QfnA+UoCULqn5hT+q1ehge85471mfmKLk24jXPlvaoU6/wYzsrcIBNVy:yA+/qPaq1eee8mqmW2XPvMfVy

Entry address:
0x6E0E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.0652

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
20 KB (20,480 bytes)

The file pointblank_xigncode.exe has been seen being distributed by the following URL.

Remove pointblank_xigncode.exe - Powered by Reason Core Security