ThreatExpert Report

Technical Details:

File System Modifications

The following files were created in the system:

Filename(s)

File Size

File Hash

%Temp%\AppManifest.xaml

961 bytes

MD5: 0x4A1505433FC019ADD8E55BE94F763396
SHA-1: 0xC4A84B70CEB4AB027773D2B481FD904B9C771AB9

%Temp%\ko\System.Json.resources.dll

11,112 bytes

MD5: 0x93D3F0341D22B5E61FD5EA35B16ECF9F
SHA-1: 0x7BCE4AD3A72372FA7045BE0237C9D6700EBD1578

%Temp%\ko\System.Xml.Linq.resources.dll

14,192 bytes

MD5: 0xEA071BF5997DDE8E99CB2895F2E972A4
SHA-1: 0xEDCFB5AC6C9726A6E56A7733B001ED9259523039

%Temp%\Solspectrum.UniQube.AD.Page.dll

14,336 bytes

MD5: 0x79430CAFD2F1226D1CA63CF5E61CAAA1
SHA-1: 0x895174C2462A378953CFC360F3E6D99548593C0E

%Temp%\Solspectrum.UniQube.dll

23,552 bytes

MD5: 0x927FB05E353A441CCEF7B406623369B4
SHA-1: 0x9C6B487AB7AA03821568B34BA63A62C76DDD74A9

%Temp%\System.Json.dll

51,032 bytes

MD5: 0x5C3561BA4D2EDA485BAF8457BDE43112
SHA-1: 0x2E6B29715490854CEB740BF6C01FCFD2F75A730E

%Temp%\System.Xml.Linq.dll

124,768 bytes

MD5: 0xAED7109F2D8C9889AF225AE9E8CFD093
SHA-1: 0xE7D347063C14D4F4B1F2053670445247FD0D2EB7

%Temp%\TiledBG.dll

12,800 bytes

MD5: 0xAA4D310770CC2BE2B8174EB1871E08DA
SHA-1: 0x83871B7FD9E5C4A905E7728172B061912E826FEC

%Temp%\UniQube.NewspaperViewer.dll

437,248 bytes

MD5: 0xBF8B49E376122229B4E81D7BCE3F7435
SHA-1: 0x087CDD094C6DC766699AC4AEC9D914642F0A9A5C

[file and pathname of the sample #1]

256,393 bytes

MD5: 0x48C559CDDFE02343B9D5706327FBC8BF
SHA-1: 0x3F4B82050595D63EB7329E6321741F8931A08497

Note:

%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

The following directory was created:

%Temp%\ko

Memory Modifications

There was a new process created in the system:

Process Name

Process Filename

Main Module Size

[generic host process]

[generic host process filename]

20,480 bytes

Notes:

[generic host process filename] is a full path filename of [generic host process].

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Submission Summary:

Technical Details: