Packed MD5 3cd7958258116c1c1873d677b57ee561 
Priority
First 06/17/2008 
Last 06/25/2008 
Count
History 4 hits: 06-17 to 06-25 
Unpacked MD5 41efedf70f0a022de23c0ef0edce78fb  
AV Hits 30 0 
AV Count 32 
CC Servers  
DNS Lookups US:microsoft.com US:download.microsoft.com 
Failed Connects US:199.93.41.126:80 US:207.123.46.125:80 US:4.23.60.125:80 US:72.247.30.144:80 US:72.247.30.211:80 US:64.62.216.10:80 US:64.62.216.56:80 US:199.93.46.125:80 US:207.123.37.126:80 
AV Name AhnLab-V3:MISSED, AntiVir:MISSED, Authentium:MISSED, Avast:MISSED, AVG:MISSED, BitDefender:MISSED, CAT-QuickHeal:MISSED, ClamAV:MISSED, DrWeb:MISSED, eSafe:MISSED, eTrust-Vet:MISSED, Ewido:MISSED, FileAdvisor:MISSED, Fortinet:MISSED, F-Prot:MISSED, F-Secure:MISSED, Ikarus:MISSED, Kaspersky:MISSED, McAfee:MISSED, Microsoft:MISSED, NOD32v2:MISSED, Norman:MISSED, Panda:MISSED, Prevx1:MISSED, Rising:MISSED, Sophos:MISSED, Sunbelt:MISSED, Symantec:MISSED, TheHacker:MISSED, VBA32:MISSED, VirusBuster:MISSED, Webwasher-Gateway:MISSED  
WinXP Files DLLHOST.EXE, SVCHOST.EXE  
WinXP Processes CMD.EXE, CSRSS.EXE, DLLHOST.EXE, EXPLORER.EXE, LSASS.EXE, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE  
WinXP Registries HKEY_LOCAL_MACHINE@...Microsoft\\DownloadManager  
WinXP Ports 1031, 707, 1034, 69  
Win-2Kf Files  
Win-2Kf Processes DLLHOST.EXE  
Win-2Kf Registries HKEY_LOCAL_MACHINE@...Microsoft\DownloadManager, HKEY_USERS@...InternetSettings\5.0, HKEY_USERS@...InternetSettings\Connections, HKEY_LOCAL_MACHINE@...Microsoft\\DownloadManager, HKEY_USERS@...InternetSettings\\5.0, HKEY_USERS@...InternetSettings\\Connections  
Win-2Kf Ports 1027, 135, 707, 1031, 69  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 Armadillo 
Packer ID2  
Embedded DNS  
String Count 82 
String Link text
String MD5 55eb271203ac5ba297bc08cd2b494a95 
Timerange 365 Days 
Unpack Status unknown (FAILED : 4 : Unpacking Timed Out) 
Countries
Unpacked Link none[4
Callgraph none:none 
API Resolution  
Comment none