Summary
Files detected as Sus/Behav-194 exhibit suspicious behaviour.
Detailed analysis
Example behaviours of Sus/Behav-194 follow:
Example 1
File Information
- Size
- 822K
- SHA-1
- 5785c84455c13a7b9b70ee5e1ce39e77cdcd931e
- MD5
- ba6966b2c06c2bb75bd96447661e27fe
- CRC-32
- 72db6380
- File type
- application/x-ms-dos-executable
- First seen
- 2010-06-23
Runtime Analysis
Dropped Files
- C:\Documents and Settings\support\Local Settings\Temp\is-KEHCM.tmp\_shfoldr.dll
- C:\Documents and Settings\support\Local Settings\Temp\is-OHCTL.tmp\is-OG7AF.tmp
Processes Created
- c:\docume~1\support\locals~1\temp\is-ohctl.tmp\is-og7af.tmp
Example 2
Other vendor detection
- Avira
- TR/Rootkit.Gen
- Kaspersky
- Trojan-Downloader.Win32.Hmir.dg
- Trend
- RTKT_FARFLI.EOJ
Example 3
File Information
- Size
- 492K
- SHA-1
- 89b452329e6a0513f896d90f2e9735b39bfd0db4
- MD5
- b64d5bd37bb973fd848a24ed3eba25bd
- CRC-32
- 4698fcea
- File type
- application/x-ms-dos-executable
- First seen
- 2010-07-12