home

vm331sti.exe

VM331 StiMnt

Vimicro

The executable vm331sti.exe has been detected as malware by 33 anti-virus scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘331BigDog’.
Publisher:
Vimicro

Product:
VM331 StiMnt

Version:
1, 0, 0, 6

MD5:
c55176cb6efca50b0b391fd3559d56eb

SHA-1:
5808a859eb4fea2f909c55800770d86bb830f920

SHA-256:
b8b64d625ab5c72c7df31af4b8c5dc47f3a871a69d45ce9005114283454d570a

Scanner detections:
33 / 68

Status:
File is infected by a Virus

Explanation:
The file is infected by a polymorphic file infector virus.

Analysis date:
11/9/2026 7:13:00 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Win32.Virtob.Gen.12
5879877

Agnitum Outpost
Win32.Virut.Y.Gen
7.1.1

AhnLab V3 Security
Win32/Virut.E
2015.08.15

Avira AntiVirus
W32/Virut.Gen
8.3.1.6

Arcabit
Win32.Virtob.Gen.12
1.0.0.425

avast!
Win32:Vitro
150717-0

AVG
Win32/Virut
2015.0.4355

Bitdefender
Win32.Virtob.Gen.12
1.0.20.1130

Bkav FE
W32.Vetor.PE
1.3.0.7062

Comodo Security
Virus.Win32.Virut.CE
23005

Dr.Web
Win32.Virut.56
9.0.1.05190

Emsisoft Anti-Malware
Win32.Virtob.Gen.12
10.0.0.5366

ESET NOD32
Win32/Virut.NBP virus
7.0.302.0

Fortinet FortiGate
W32/Virut.CE
8/14/2015

F-Prot
W32/Virut.AI!Generic
4.6.5.141

F-Secure
Win32.Virtob.Gen.12
5.14.151

G Data
Win32.Virtob.Gen.12
15.8.25

K7 AntiVirus
Virus
13.2016893

Kaspersky
Virus.Win32.Virut
15.0.0.543

McAfee
Virus.W32/Virut.n.gen
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.203.2123.0

MicroWorld eScan
Win32.Virtob.Gen.12
16.0.0.678

NANO AntiVirus
Virus.Win32.Virut.hpeg
0.30.24.3079

Norman
Win32.Virtob.Gen.12
04.08.2015 10:30:46

Panda Antivirus
W32/Sality.AO
15.08.14.12

Quick Heal
W32.Virut.G
8.15.14.00

Rising Antivirus
PE:Win32.Virut.cl!1523074
23.00.65.15812

Sophos
Virus 'W32/Scribble-B'
5.15

Total Defense
Win32/Virut.17408
37.1.62.1

Trend Micro House Call
PE_VIRUX.S-4
7.2.226

Trend Micro
PE_VIRUX.S-4
10.465.14

VIPRE Antivirus
Threat.4120919
42326

ViRobot
Win32.Virut.AL[h]
2014.3.20.0

File size:
556 KB (569,344 bytes)

Product version:
1, 0, 0, 6

Copyright:
Copyright c 2007

Original file name:
VM331_STI.exe.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Traditional, Taiwan)

Common path:
C:\Program Files\usb camera\vm331sti.exe

File PE Metadata
Compilation timestamp:
3/12/2013 10:02:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:4OIA/frZ1d0x6smtZ2P9vxyKum1QIEzH65SqDncfZEHPEwF1Wue6td1iqj6I4CFT:7I69/9TtZo9BEzaBncCvEwx6I4a

Entry address:
0x416F9

Entry point:
E8, 89, FE, 00, 00, E9, 16, FE, FF, FF, 53, 56, 8B, 74, 24, 0C, 8B, 46, 0C, 8B, C8, 80, E1, 03, 33, DB, 80, F9, 02, 75, 3F, 66, A9, 08, 01, 74, 39, 8B, 46, 08, 57, 8B, 3E, 2B, F8, 85, FF, 7E, 2C, 57, 50, 56, E8, 66, 5B, 00, 00, 59, 50, E8, 37, A3, 00, 00, 83, C4, 0C, 3B, C7, 75, 0F, 8B, 46, 0C, 84, C0, 79, 0F, 83, E0, FD, 89, 46, 0C, EB, 07, 83, 4E, 0C, 20, 83, CB, FF, 5F, 8B, 46, 08, 83, 66, 04, 00, 89, 06, 5E, 8B, C3, 5B, C3, 56, 8B, 74, 24, 08, 85, F6, 75, 09, 56, E8, 33, 00, 00, 00, 59, 5E, C3, 56, E8...
 
[+]

Entropy:
6.6392

Code size:
436 KB (446,464 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
331BigDog

Command:
"C:\Program Files\usb camera\vm331sti.exe"


Remove vm331sti.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.