|
Summary:
|
Description
|
Risk
|
| AV Hit: This executable is detected by an antivirus software.
|
|
|
|
| Time needed: |
242 s |
| Report created: |
02/28/11, 08:49:40 UTC |
| Termination reason: |
Timeout |
| Program version: |
1.74.3362 |
|
|
|
| Analysis Reason: |
Primary Analysis Subject |
| Filename: |
41045688.exe |
| MD5: |
c17aacdfab108ab134f0fabca27672b2 |
| SHA-1: |
e92ddc0f1708b02dbe45f59e4b615f3419695f4a |
| File Size: |
45056 Bytes |
| Command Line: |
"C:\41045688.exe" |
| Process-status at analysis end: |
alive |
| Exit Code: |
0 |
|
|
|
|
Module Name
|
Base Address
|
Size
|
| C:\WINDOWS\system32\ntdll.dll
|
0x7C900000 |
0x000AF000 |
| C:\WINDOWS\system32\kernel32.dll
|
0x7C800000 |
0x000F6000 |
| C:\WINDOWS\system32\USER32.dll
|
0x7E410000 |
0x00091000 |
| C:\WINDOWS\system32\GDI32.dll
|
0x77F10000 |
0x00049000 |
|
|
|
| Trojan.Win32.Pincav (Sig-Id:1503840) |
|
|
|
|
Key
|
Name
|
Value
|
Times
|
| HKLM\System\CurrentControlSet\Control\Terminal Server
|
TSAppCompat |
0
|
2 |
|
|
|
expand all
