« previous next »
Pages: [1]   Go Down

Author Topic: Does avast detect this executable? Is it a 100% threat or just a PUP detection?  (Read 1049 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33923
  • malware fighter
Does avast detect this executable? Is it a 100% threat or just a PUP detection?
« on: January 31, 2017, 11:20:22 PM »
See: http://urlquery.net/report.php?id=1485898696935
See: https://www.virustotal.com/nl/url/a62df20d5864ffdd033b183b1e8d1d5cb9eafcfc2953732018f5fe4f5b52b3c4/analysis/1485899767/
Detection still not added here (or could be a PUP detected).
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file.
FP? -> Authenticode signature block and FileVersionInfo properties
Signature verification  Signed file, verified signature
Signers   
  • OOO "Meti-Vostok"
  • COMODO RSA Code Signing CA
  • COMODO SECURE?

Re: http://www.freefixer.com/library/file/nethost.exe-201916/  &  http://www.threatexpert.com/files/nethost.exe.html

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »