home

dup106offs.exe

MD5:
3a17bd7e1187391e9f2b30bc7320f003

SHA-1:
8ac4e42735b66d9f46197da16b720231a8169334

SHA-256:
a0bad4bcdb7b93a2cd8856df23c055d80f7dce2d562b9a044e3ff508861f719a

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/24/2024 10:46:03 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/HackTool.Patcher (variant)
8.5930

File size:
11 KB (11,264 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
7/25/2004 7:02:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
96:dChoTMNF4m5aRg1HFTZcJidH3IDOuq/8+LV6aH53j3F0PhG4G:dCqwHVoRg1HsWfTDAc3Z0JG4

Entry address:
0x1472

Entry point:
6A, 00, E8, 61, 06, 00, 00, A3, 10, 3C, 40, 00, 6A, 00, 68, 9A, 14, 40, 00, 6A, 00, 6A, 01, FF, 35, 10, 3C, 40, 00, E8, C2, 05, 00, 00, 50, E8, 34, 06, 00, 00, 55, 8B, EC, 60, 8B, 45, 08, A3, 24, 3C, 40, 00, 81, 7D, 0C, 10, 01, 00, 00, 0F, 85, B6, 00, 00, 00, 68, 4C, 30, 40, 00, 6A, 69, FF, 35, 24, 3C, 40, 00, E8, EB, 05, 00, 00, 68, B0, 30, 40, 00, 6A, 68, FF, 35, 24, 3C, 40, 00, E8, D9, 05, 00, 00, 68, 7E, 30, 40, 00, 6A, 67, FF, 35, 24, 3C, 40, 00, E8, C7, 05, 00, 00, 68, E2, 30, 40, 00, 6A, 6D, FF, 35...
 
[+]

Packer / compiler:
TASM / MASM

Code size:
3 KB (3,072 bytes)

Scan dup106offs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.