ربيع المدخلي.exe

MD5:
6ac738b8a31332bfc053cf97b0770ae1

SHA-1:
03a883c51491f19f1d57c476e1587194b47f7651

SHA-256:
c3c919aa0ac4acc73ccf686867c2e0cf0f67ceda21e45e7cbbf80ed37c1f3cc3

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
3/29/2015 6:36:11 PM UTC  (today)

Scan engine
Detection
Engine version

ByteHero BDV
Virus.Win32.Part.a
2.19.2014.10

File size:
6.9 MB (7,260,192 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\saadi soft\مكتبة اهل السنة و الجماعة\maktaba\docs\مكتبة أهل السنة و الحماعة\ربيع المدخلي.exe

File PE Metadata
Compilation timestamp:
7/6/2000 5:17:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:qKncCoN05mRznI6oEcjlXd1GtXdc+wV1D+/1iXPpFGHIxfkJN/GK85XNl293IP/K:K725crIC2lXdcwS/Wfkb/76Ha4Pzbq

Entry address:
0xB367

Entry point:
55, 8B, EC, 6A, FF, 68, 20, F4, 40, 00, 68, C0, D9, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 68, F1, 40, 00, 33, D2, 8A, D4, 89, 15, 94, 1C, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 90, 1C, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 8C, 1C, 41, 00, C1, E8, 10, A3, 88, 1C, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 31, 24, 00, 00, FF, 15, 6C, F1, 40, 00, A3, A4, 21, 41, 00, E8...
 
[+]

Entropy:
7.9980  (probably packed)

Code size:
56 KB (57,344 bytes)

There are numerous known code variantions that share the same compilation structure.

0 / 68
kruger v11.2a.exe  (f2bae36c9ad9a62f54e3eaaecb7f0130c5860bfb)

1 / 68
primi passi.exe  (bd16464b0ed8994f994285662106630e2c4f688b)

0 / 68
tokemots-install.exe  (d406c24d9aadc11c3bf44d24a44eb4c5b93f44fe)

0 / 68
gdmsetup.exe  (227deb236d9f86427fada733c1fd6234012a52a9)

1 / 68
senecav.exe  (2667b3613354a341228229eb5922423184da2a87)

0 / 68
mwmanager.exe  (cc47075523abd5c2e6003b194671b5b07296fb02)

1 / 68
amo82-update.exe  (e5fef602362b190c148e7929c0bc3b2c8d9b7f0b)

1 / 68
albany_tahzeer_sajed_setup.exe  (bad78e5c9c61ca3b7e1fbb551d9263804d71e098)

0 / 68
instal_bdb.exe  (42ae9d3c4b8243d105898a1d7917c9774d9e40f9)

2 / 68      (inconclusive)
ml2setup.exe  (8d20b084ba077d341e67ab390ebf5407031b0707)

0 / 68
lf2_v19.exe  (708c6be6dc4a195c1011fde480157862c60fbdee)

0 / 68
الحديث النبوي الشريف.exe  (70af34225e7526fe06645e902a58d1855a8d6e04)

0 / 68
indianajoneset_cz.exe  (2454eef9d9c89b66c5702329ee8da796de3b121a)

1 / 68
rbfree13.exe  (951e7e0918dd6f90222931ef7a328e0e12600544)

1 / 68
qcm_le_risque_chimique_1_3743.exe  (9170e2c0e259efb7f3b07e07f5f70be46a78a235)

Distribution by Country