home

1dff.tmp

MD5:
a854e510c01b2996371972e9db67e4ea

SHA-1:
c59c28984212bb514aaa371fea29d468488d339c

SHA-256:
ec007e0f50a7ffb7a0aeb743b59384b05a1e3dc03f99a1dbbfe866b0bece9758

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 3:50:46 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
W32/Sality.AT
7.11.30.172

File size:
163 KB (166,912 bytes)

Common path:
C:\users\{user}\appdata\local\temp\1dff.tmp

File PE Metadata
Compilation timestamp:
1/6/2016 8:19:43 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
1536:7DbRGvx00mXogmWK1mYLVpsaF9IIII1LraHBodKul/XauYCxlvIipY37I1eofyRY:nU041L7sSIIIIlr71lXauBvvIi+pHiGm

Entry address:
0x23D83E

Code size:
2.4 MB (2,501,120 bytes)

Scan 1dff.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.