ThreatExpert Report

Technical Details:

File System Modifications

The following files were created in the system:

Filename(s)

File Size

File Hash

%Temp%\hay.class

2,708 bytes

MD5: 0x3BF56AB46F49A6AA8A5B6D5AAA5BF40C
SHA-1: 0xD5E032D7480AFE4EFE3F9360A938C61844B544A6

%Temp%\META-INF\MANIFEST.MF

71 bytes

MD5: 0x1C9A2B4CA30BF9F0A44D8E24C8DD48EE
SHA-1: 0x1B4AB5B6BAFC64F9A0A17DA457AEC4B47100849B

%Temp%\pax.class

1,883 bytes

MD5: 0x665C3125FE7A13ABE99C077E270B3082
SHA-1: 0x511A9AC3F9E923284DA7D77B92931DB57D08B756

%Temp%\two.class

1,720 bytes

MD5: 0x1A5F2F5A93958166C7555486EB39ECCD
SHA-1: 0x90B703A9975F694D9F6FA010C20474F05315C6C0

%Temp%\yow.class

5,357 bytes

MD5: 0xFBD87C30F6B4AFFE9A249621473C630F
SHA-1: 0x09A138D861FB2A918A60DFB88F8599CAA8E2B2B1

[file and pathname of the sample #1]

6,424 bytes

MD5: 0x9458F4EAE8C69F9779A17C19A02D6AEE
SHA-1: 0x8D00D118D01938F7528B99780E07A0A48CB4E83C

Note:

%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

The following directory was created:

%Temp%\META-INF

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Submission Summary:

Technical Details: