ربيع المدخلي.exe

MD5:
6ac738b8a31332bfc053cf97b0770ae1

SHA-1:
03a883c51491f19f1d57c476e1587194b47f7651

SHA-256:
c3c919aa0ac4acc73ccf686867c2e0cf0f67ceda21e45e7cbbf80ed37c1f3cc3

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
2/19/2014 6:20:01 PM UTC  (ten months ago)

Scan engine
Detection
Engine version

ByteHero BDV
Virus.Win32.Part.a
2.19.2014.10

File size:
6.9 MB (7,260,192 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\saadi soft\مكتبة اهل السنة و الجماعة\maktaba\docs\مكتبة أهل السنة و الحماعة\ربيع المدخلي.exe

File PE Metadata
Compilation timestamp:
7/6/2000 5:17:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:qKncCoN05mRznI6oEcjlXd1GtXdc+wV1D+/1iXPpFGHIxfkJN/GK85XNl293IP/K:K725crIC2lXdcwS/Wfkb/76Ha4Pzbq

Entry address:
0xB367

Entry point:
55, 8B, EC, 6A, FF, 68, 20, F4, 40, 00, 68, C0, D9, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 68, F1, 40, 00, 33, D2, 8A, D4, 89, 15, 94, 1C, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 90, 1C, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 8C, 1C, 41, 00, C1, E8, 10, A3, 88, 1C, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 31, 24, 00, 00, FF, 15, 6C, F1, 40, 00, A3, A4, 21, 41, 00, E8...
 
[+]

Entropy:
7.9980  (probably packed)

Code size:
56 KB (57,344 bytes)

There are numerous known code variantions that share the same compilation structure.

1 / 68
qcm_le_risque_chimique_1_3743.exe  (9170e2c0e259efb7f3b07e07f5f70be46a78a235)

1 / 68
matagogo-install.exe  (ab128d10623233a86c3fc797c4ccff179b068c11)

1 / 68
les_virus_1_3414.exe  (afba9ce539dd360ceae3139037ebfa0b72fb5c8f)

0 / 68
aliments_et_microbiologie_1_3410.exe  (6f8804fe5f2267c46ba7bfa75f27c481ed67fda7)

0 / 68
setup.exe  (721a648fabef2e6b46f4b42b66f801d13531794c)

1 / 68
amo821-update.exe  (4fb94d1e27bf00ad31b951d57655c32a092ca136)

1 / 68
amo811-update.exe  (3b591b8a3cbd981bb0204eb23c04c7ad2e1f96f1)

1 / 68
amo80-update.exe  (4bdcdb712fe80645c1034924849059c02eec5ad2)

0 / 68
amo775-update.exe  (7deea05e785f1025c23754e39ac2028e2aabe967)

0 / 68
amo775-setup.exe  (c9369361c4199818f95a272e2ce1c4ad4e74bc50)

1 / 68
radionicsinstall.exe  (b53bc9c4a3be1849f84aa27ff3de4c34cda02204)

1 / 68
mariosorb.exe  (3d5ff905bb5ca06818100dc12191bca03e3fa8c9)

1 / 68
emurayden-v22.exe  (65b1080d49931bc304981375a3d94b730234cdaf)

0 / 68
lovechess the greek era.exe  (735adc9ef1d6ef9ee361c7b733435c48fd082c07)

1 / 68
čeština !.exe  (6d07aa6ba77955d3ac55e18611ebe911dbbb490e)

Distribution by Country