home

msactbackup.exe

MD5:
09ba5fbcb53586f28b0ddd6be9828bac

SHA-1:
c3a7c7749aa20136c6c8a3732e80c2f882469ad8

SHA-256:
fdde1a42d7c0706736c525dedde797efbb6b9fffbd1c9364b027e76c9db95f34

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 3:59:09 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
HackTool
2016.0.3156

IKARUS anti.virus
Virus.Win32.Sality
t3scan.1.8.6.0

Trend Micro House Call
Suspicious_GEN.F47V0223
7.2.87

File size:
975.5 KB (998,912 bytes)

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
2/23/2015 5:17:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
24576:q5GrMnvNQ+kTB6Xi6kgaINV+vXi6kgaINVL0bXi6kgaINV/:qKGKTwXiTcNUvXiTcNabXiTcN

Entry address:
0x1000

Entry point:
68, 0C, 06, 00, 00, 68, 00, 00, 00, 00, 68, F0, 3E, 4E, 00, E8, D6, B1, 00, 00, 83, C4, 0C, 68, 00, 00, 00, 00, E8, CF, B1, 00, 00, A3, F4, 3E, 4E, 00, 68, 00, 00, 00, 00, 68, 00, 10, 00, 00, 68, 00, 00, 00, 00, E8, BC, B1, 00, 00, A3, F0, 3E, 4E, 00, B8, 24, 5F, 46, 00, A3, 4C, 3F, 4E, 00, E8, E2, F2, 01, 00, E8, 8D, E5, 01, 00, E8, 03, CB, 01, 00, E8, 7B, BD, 01, 00, E8, BF, B0, 01, 00, E8, D3, AD, 01, 00, E8, 88, AC, 01, 00, E8, 51, 94, 01, 00, E8, 40, 8F, 01, 00, E8, 45, 7D, 01, 00, E8, F4, 6D, 01, 00...
 
[+]

Packer / compiler:
PKLITE32, 0x1.1

Code size:
336 KB (344,064 bytes)

Scan msactbackup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.