MALICIOUS — 35d5600b40efca804b5a6e81cd2fcc852b3303c22e4a6602a9976b5d3f6cc855

MALICIOUS — 35d5600b40efca804b5a6e81cd2fcc852b3303c22e4a6602a9976b5d3f6cc855 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (95/100), attributed to the Fileinfector family. 5 of 52 detection engines flagged it.

Identification

• SHA-256: 35d5600b40efca804b5a6e81cd2fcc852b3303c22e4a6602a9976b5d3f6cc855
• SHA-1: 43224c6ea5904d8296a0edd4f8bff0e214993ef4
• MD5: 5c99e85f1f820c2f800a692acba4772a
• imphash: 895fbb56c02c3d2bca3125cef5da8730
• File type: pe · Size: 645527 bytes
• Verdict: malicious (95/100) · Family: Fileinfector

Detections (5 of 52 engines)

• MalwareAnalyser heuristics (entropy/packer): UPX
• ClamAV (daily): Win.Malware.Fileinfector-9832954-0
• Detect It Easy (packer/type): DIE:UPX 3.96
• Kaspersky (KVRT): Virus.Win32.Lamer.ks
• Microsoft Defender: Trojan:Win32/Vindor!pz

Embedded URLs

• http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0

Embedded domains

• www.microsoft.com
• crl.microsoft.com

File paths

• D:\a\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb
• H:\:d:

More Fileinfector samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report