| SHA256: | 3a3823bbe16fe4c47e5eefdc575d7bfd12e93787abd52f165f120a22bbdf46e7 |
| Dateiname: | wlanscanner2014_PCW.exe |
| Erkennungsrate: | 0 / 51 |
| Analyse-Datum: | 2016-06-30 08:14:54 UTC ( vor 2 Jahre, 7 Monate ) |
| Antivirus | Ergebnis | Aktualisierung |
|---|---|---|
| Ad-Aware | 20160630 | |
| AegisLab | 20160629 | |
| AhnLab-V3 | 20160630 | |
| Alibaba | 20160630 | |
| Antiy-AVL | 20160630 | |
| Arcabit | 20160630 | |
| Avast | 20160630 | |
| AVG | 20160630 | |
| Avira (no cloud) | 20160630 | |
| AVware | 20160630 | |
| Baidu | 20160630 | |
| BitDefender | 20160630 | |
| Bkav | 20160629 | |
| CAT-QuickHeal | 20160630 | |
| ClamAV | 20160630 | |
| CMC | 20160630 | |
| Comodo | 20160630 | |
| Cyren | 20160630 | |
| DrWeb | 20160630 | |
| Emsisoft | 20160630 | |
| ESET-NOD32 | 20160630 | |
| F-Prot | 20160630 | |
| F-Secure | 20160630 | |
| Fortinet | 20160630 | |
| GData | 20160630 | |
| Ikarus | 20160630 | |
| Jiangmin | 20160630 | |
| K7AntiVirus | 20160630 | |
| K7GW | 20160630 | |
| Kaspersky | 20160630 | |
| Kingsoft | 20160630 | |
| Malwarebytes | 20160630 | |
| McAfee | 20160630 | |
| McAfee-GW-Edition | 20160630 | |
| Microsoft | 20160630 | |
| eScan | 20160630 | |
| NANO-Antivirus | 20160630 | |
| nProtect | 20160630 | |
| Panda | 20160629 | |
| Qihoo-360 | 20160630 | |
| Sophos AV | 20160630 | |
| SUPERAntiSpyware | 20160630 | |
| Symantec | 20160630 | |
| Tencent | 20160630 | |
| TheHacker | 20160630 | |
| TrendMicro | 20160630 | |
| TrendMicro-HouseCall | 20160630 | |
| VBA32 | 20160629 | |
| VIPRE | 20160630 | |
| ViRobot | 20160630 | |
| Zoner | 20160629 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
Authenticode signature block and FileVersionInfo properties
Copyright
Copyright © 1999 - 2014 abylonsoft
Product abylon WLAN-LIVE-SCANNER (Privatversion)
File version 2014.9
Description abylon WLAN-LIVE-SCANNER (Privatversion) Setup
Comments This installation was built with Inno Setup.
Signature verification
Signed file, verified signature
Signing date 1:42 PM 11/4/2014
| Signers |
Packers identified
F-PROT INNO, appended
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 1992-06-19 22:22:17
Entry Point 0x0000A5F8
Number of sections 8
PE sections
Overlays
MD5 5b3e5e53da709d79141b98c94c9bd32f
File type data
Offset 56832
Size 15216976
Entropy 8.00
PE imports
Number of PE resources by type
RT_STRING 6
RT_ICON 4
RT_MANIFEST 1
RT_RCDATA 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
NEUTRAL 7
DUTCH 4
ENGLISH US 3
PE resources
ExifTool file metadata
UninitializedDataSize
0
Comments
This installation was built with Inno Setup.
LinkerVersion
2.25
ImageVersion
6.0
FileSubtype
0
FileVersionNumber
2014.9.0.0
LanguageCode
Neutral
FileFlagsMask
0x003f
CharacterSet
Unicode
InitializedDataSize
17920
EntryPoint
0xa5f8
MIMEType
application/octet-stream
LegalCopyright
Copyright 1999 - 2014 abylonsoft
FileVersion
2014.9
TimeStamp
1992:06:19 23:22:17+01:00
FileType
Win32 EXE
PEType
PE32
SubsystemVersion
4.0
ProductVersion
2014.9
FileDescription
abylon WLAN-LIVE-SCANNER (Privatversion) Setup
OSVersion
1.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
abylonsoft
CodeSize
40448
ProductName
abylon WLAN-LIVE-SCANNER (Privatversion)
ProductVersionNumber
2014.9.0.0
FileTypeExtension
exe
ObjectFileType
Executable application
File identification
MD5 f6bd149e21aad9b2734a7666e571f94b
SHA1 34245b2afa9e7d528b436c8f0faabdb8669bc0a0
SHA256 3a3823bbe16fe4c47e5eefdc575d7bfd12e93787abd52f165f120a22bbdf46e7
ssdeep
393216:ipeDZk2W/zQU6ZBXCEtLjIqJosA0A+cXFUfwYJsL:x5qEUSl5IqzcXcwbL
File size
14.6 MB ( 15273808 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Inno Setup installer (71.1%) Win32 Executable Delphi generic (9.1%) Windows screen saver (8.4%) Win32 Dynamic Link Library (generic) (4.2%) Win32 Executable (generic) (2.9%) |
Tags
peexe
signed
overlay
VirusTotal metadata
First submission
2014-12-06 23:10:43 UTC ( vor 4 Jahre, 2 Monate )
Last submission
2016-06-30 08:14:54 UTC ( vor 2 Jahre, 7 Monate )
| Dateinamen |
wlanscanner2014_PCW.exe wlanscanner2014_PCW.exe |
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the
scanned file presents certain characteristics which depending on the
user policies and environment may or may not represent a threat. For
full details see:
https://www.clamav.net/documents/potentially-unwanted-applications-pua
.
Symantec reputation
Suspicious.Insight
Keine Kommentare.
Bisher hat kein Mitglied der VirusTotal-Community einen Kommentar zu diesem Punkt verfasst, seien Sie der Erste!
Sie sind nicht angemeldet. Nur registrierte Nutzer können Kommentare hinterlassen, melden Sie sich an und sagen Sie etwas dazu!
Keine Bewertungen.
Niemand hat diesen Punkt bisher bewertet, seien Sie der Erste!
Condensed report! The following is a condensed report of the
behaviour of the file when executed in a controlled environment. The actions
and events described were either performed by the file itself or by any other
process launched by the executed file or subjected to code injection by the
executed file.
Opened files
Read files
Written files
Deleted files
Created processes
Runtime DLLs
Additional details
The file sends control codes directly to certain device drivers making use of the
DeviceIoControl
Windows API function.