home

tmp0

Bastian Suter

Publisher:
Bastian Suter  (signed and verified)

MD5:
3ef7575649699240ac0fd8211204a4ff

SHA-1:
fe019c759518c83bb4d1ca4622305026adc0a2ea

SHA-256:
8b9cd16cdc155cdbe5f5cb381c958f7c79860c7c8eb14dab17cab8c5206c4b0c

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 3:02:36 AM UTC  (today)

Scan engine
Detection
Engine version

McAfee
Generic Obfuscated.c
5600.6846

File size:
98 KB (100,400 bytes)

Common path:
C:\users\{user}\appdata\local\temp\tmp0

Digital Signature
Signed by:
Bastian Suter

Authority:
DigiCert Inc

Valid from:
3/4/2014 4:00:00 PM

Valid to:
5/13/2015 5:00:00 AM

Subject:
CN=Bastian Suter, O=Bastian Suter, L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F01D40307832B7F6747D7AB752213DC

File PE Metadata
Compilation timestamp:
5/31/2014 6:45:00 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
1536:C8vKe1lteOh2eYo6jelfHC/NDT9eAdhccx4+0lHXcJYVD2SNaBfZ1vs/ZfheczP:Cm1eS2n8WNDJbPIlMlSNSfZ1vsRfocj

Entry address:
0x1DFF4

Entry point:
E9, 42, 89, 00, 00, E9, 97, 57, 00, 00, 0F, 85, 8C, 91, 00, 00, E9, 93, FF, FF, FF, E9, 4D, 7F, 00, 00, E9, EB, 90, 00, 00, E9, F7, 97, FF, FF, E9, C4, D8, FF, FF, 0F, 85, 01, FF, FF, FF, C0, FD, 04, 0F, 9C, C5, 8B, 4D, FC, 0F, BA, E4, 18, 48, 85, CD, 39, 4D, 28, 0F, 8A, 66, FF, FF, FF, 0F, 87, 76, 74, 00, 00, 66, 0F, B6, F8, 66, 89, D6, 66, 0F, BE, F3, 87, F7, 5E, 66, 0F, BE, C9, 0F, B6, FA, E9, 29, 8D, 00, 00, 0F, 84, 1E, 9D, FF, FF, E9, CD, 68, 00, 00, D1, E8, E9, 4C, 6C, 00, 00, 0F, 82, D7, 4B, 00, 00...
 
[+]

Entropy:
7.4188

Packer / compiler:
Xtreme-Protector v1.05

Code size:
26.5 KB (27,136 bytes)

Scan tmp0 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.