home

winspxi.exe

MD5:
43031b2dd0182823a6664e1d85d5369a

SHA-1:
dbba7210812d10b2abe6e213a945e3f2cbebcc79

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
5/1/2024 3:44:37 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Sality
160917-0

File size:
112.7 KB (115,370 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\winspxi.exe

File PE Metadata
Compilation timestamp:
2/15/2017 4:21:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x2C6570

Entry point:
60, 33, C6, FE, CA, EB, 01, 9C, 8B, F5, 51, FF, C6, F3, 0F, B7, D9, 5E, 0F, A4, C1, 24, 8B, F5, 0F, A5, F7, 6A, 00, FF, 15, 8C, 70, 6C, 00, 81, C5, F6, 82, D4, 73, 0F, CD, 0F, B7, D9, C7, C1, 86, 31, 30, 33, E8, 00, 00, 00, 00, 01, C0, 8D, 2D, 83, 3A, 15, 84, 0F, AF, FE, D2, DC, 6A, 00, FF, 15, 8C, 70, 6C, 00, 5A, 81, C2, 1A, 03, 00, 00, F7, C7, 70, 73, 6A, 85, 0F, CF, EB, 01, 54, 81, C2, 79, 00, 00, 00, 8B, CD, 15, 74, 67, 8E, 19, 48, 81, C2, 41, 0B, 00, 00, 8D, 3D, 94, 07, AE, B9, 86, C3, FF, C1, 81, EA...
 
[+]

Entropy:
7.9357  (probably packed)

Code size:
52 KB (53,248 bytes)

Internet Explorer Menu Extension
Name:
E&xport to Microsoft Excel


Scan winspxi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.