home

unimon.exe

Digitope FontZip

Digitope Corporation

Publisher:
Digitope Corporation

Product:
Digitope FontZip

Description:
FontZip Installer

Version:
5.00

MD5:
6904b2248f3c4c8430547620c64e116c

SHA-1:
31a0377e831d65196c4da1ce8cd851b72a751fa7

SHA-256:
f982ba476ea8a102c1187f99adbab6aab036c9b09cd57fdbb35086c795fc6727

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
1/14/2025 11:43:54 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Dr.Web
Trojan.VbCrypt.250
9.0.1.05190

Zillya! Antivirus
Downloader.LMN.Win32.388007
2.0.0.2580

File size:
441.7 KB (452,310 bytes)

Product version:
5.00

Copyright:
Copyright © 2001-2006 Digitope Corporation. All rights reserved.

Trademarks:
Digitope™, FontZip™, and FontPak™ are trademarks of Digitope Corporation. All rights reserved.

Original file name:
installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
12/13/2006 2:43:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:5emVwS4MV40I1w6aUy8cCUW1RoLhpiUpDjBIdEUmPX7OMbruh2j/S:iGpIOxLyUW32hpiUFydxmzOMxW

Entry address:
0x19B0

Entry point:
68, DC, 26, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 09, E4, C2, 9F, 01, 81, 8B, 4B, 93, B5, 2B, 22, 87, 94, 19, 1C, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 42, 00, 68, 99, 42, 00, 46, 6F, 6E, 74, 53, 65, 74, 75, 70, 00, 42, 00, 18, 99, 42, 00, 00, 00, 00, 00, FF, CC, 31, 00, 2B, 00, 4E, 71, 17, 9E, DA, CD, 48, A8, D9, 15, BC, 2F, 6D, 55, E1, 4A, B9, D6, 30, 7E, 9D, 87, 48, B1, 19, 6A, 76, 59, 59, 2F, D3, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.8013

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
56 KB (57,344 bytes)

The file unimon.exe has been seen being distributed by the following URL.

http://tapautabuo.googlepages.com/UniMon.exe

Scan unimon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.