ThreatExpert Report

Visit ThreatExpert web site

Close Report

Submission Summary:

Submission details:

Submission received: 19 August 2012, 17:25:00
Processing time: 3 min 49 sec
Submitted sample:

File MD5: 0xD4C6D8EA7405CBA7857C33AB69AC2FCD
File SHA-1: 0xF13584DFBDF35902C4D21FBE3D92C452515C0F1E
Filesize: 1,646,002 bytes

Technical Details:

File System Modifications

The following files were created in the system:

#	Filename(s)	File Size	File Hash
1	%CommonPrograms%\PRIAMOS\PRIAMOS.lnk	628 bytes	MD5: 0x68B1BC27E27CF94794218273B04C27EB SHA-1: 0xFEE4FA1E24CE0359888B43A2BDE5D930BC6F919F
2	%ProgramFiles%\PRIAMOS\ChilkatDotNet2.dll	3,593,120 bytes	MD5: 0x246C3D3AE336A02AF7736904EE3CD114 SHA-1: 0xFB3CCE82EA11B8FBBB0F87734FFB8F26F63E6CA8
3	%ProgramFiles%\PRIAMOS\PRIAMOS.exe	389,120 bytes	MD5: 0x469B249FD7FA6E900082D623DEA6FB35 SHA-1: 0xE32B5AAD37A1E3FB83D5B0C327E092123A783F24
4	%ProgramFiles%\PRIAMOS\PRIAMOS.exe.manifest	4,429 bytes	MD5: 0x51F47DD749EF133F784F5307DF38E6D3 SHA-1: 0xE55D70078DF7DFBBDD8BA3A6372460CBFED4539A
5	%ProgramFiles%\PRIAMOS\unins000.dat	1,242 bytes	MD5: 0xD0DDDAA417FA369F4DC9361FB2A2CA1B SHA-1: 0xBD913E98B7BC4EC04D86BC62C3F482CDC195F63F
6	%ProgramFiles%\PRIAMOS\unins000.exe	756,505 bytes	MD5: 0xAFCD26396E4ABCF18440B69AFC10948D SHA-1: 0xA5AC95E796F90E4CDADD787FA399B54691D2697A
7	[file and pathname of the sample #1]	1,646,002 bytes	MD5: 0xD4C6D8EA7405CBA7857C33AB69AC2FCD SHA-1: 0xF13584DFBDF35902C4D21FBE3D92C452515C0F1E

Notes:

%CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).
%ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.

The following directories were created:

%CommonPrograms%\PRIAMOS
%ProgramFiles%\PRIAMOS

Memory Modifications

There were new processes created in the system:

Process Name	Process Filename	Main Module Size
[filename of the sample #1]	[file and pathname of the sample #1]	155,648 bytes
is-VSPO0.tmp	%Temp%\is-932QQ.tmp\is-VSPO0.tmp	806,912 bytes

Notes:

%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

Registry Modifications

The following Registry Key was created:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PRIAMOS_is1

The newly created Registry Value is:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PRIAMOS_is1]

Inno Setup: Setup Version = "5.1.11"
Inno Setup: App Path = "%ProgramFiles%\PRIAMOS"
InstallLocation = "%ProgramFiles%\PRIAMOS\"
Inno Setup: Icon Group = "PRIAMOS"
Inno Setup: User = "%UserName%"
Inno Setup: Selected Tasks = ""
Inno Setup: Deselected Tasks = "desktopicon"
DisplayName = "PRIAMOS.v1.0"
UninstallString = ""%ProgramFiles%\PRIAMOS\unins000.exe""
QuietUninstallString = ""%ProgramFiles%\PRIAMOS\unins000.exe" /SILENT"
Publisher = "Yigit Aktan"
URLInfoAbout = "http://www.priamos-project.com"
HelpLink = "http://www.priamos-project.com"
URLUpdateInfo = "http://www.priamos-project.com"
NoModify = 0x00000001
NoRepair = 0x00000001
InstallDate = "20120819"

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.