home

eapi.fne

MD5:
82fc4ed2cfdf56d2220bb980e6f29e37

SHA-1:
37ed76748e45321d5ea6c6512b65b819a32744d0

Scanner detections:
6 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/19/2024 8:06:31 AM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/Websearch.A.gen
v6.4.5.1.85

McAfee
generic!bg.etr
5600.6960

Prevx
High Risk Cloaked Malware
3.0

Quick Heal
Win32.Trojan.BHO.oqi.5.Pack
11.14.10.00

Sophos
Mal/EncPk-NB
4.50

Vba32 AntiVirus
Trojan.Win32.BHO.oqi
3.12.12.1

File size:
316 KB (323,584 bytes)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\eapi.fne

File PE Metadata
Compilation timestamp:
9/16/2008 11:11:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:dt/ZSzAmwlLULEwD6ipGQltuIN80AD/DVEwKJIlc+xwcJ:PZSzSlk2Y4IixTDaiB

Entry address:
0x3013F

Entry point:
50, 53, 51, 52, 56, F9, 57, 0F, 82, 8E, FE, FF, FF, B6, C0, C3, 69, D6, 1F, 82, 81, EB, 87, 00, 00, 00, E9, EC, FE, FF, FF, 6C, F1, E2, 56, 0B, EB, C2, 87, 49, 01, 4E, B9, 73, 82, 14, D0, 31, 83, A0, BC, F9, 83, DB, F7, E9, 59, 00, 00, 00, 36, 1F, 9D, FB, F0, D7, FC, 71, 16, 0B, B3, 97, 01, 70, 52, 8D, E3, C1, BB, 81, C0, 41, 31, 74, 22, A3, B2, 41, 0F, 27, 87, DB, 38, 07, 19, D6, 73, 11, 06, 29, 6B, 95, 74, 32, 96, 81, 0F, 85, 8A, 00, 00, 00, 0F, 83, EB, FE, FF, FF, 0F, FA, 68, CB, CD, BB, C7, 0F, 20, 9F...
 
[+]

Entropy:
7.0704

Code size:
192 KB (196,608 bytes)

Scan eapi.fne - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.