× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 582596c031a5b6c280ea9288be190b9399de3ef84ca62c0dbf44360a329fc2f9
File name: Amnesia Shader Tool.exe
Detection ratio: 0 / 55
Analysis date: 2014-09-26 09:17:24 UTC ( 3 years, 2 months ago ) View latest
Antivirus Result Update
Ad-Aware 20140926
AegisLab 20140926
Yandex 20140925
AhnLab-V3 20140926
Antiy-AVL 20140926
Avast 20140926
AVG 20140926
Avira (no cloud) 20140926
AVware 20140926
Baidu-International 20140926
BitDefender 20140926
Bkav 20140925
ByteHero 20140926
CAT-QuickHeal 20140926
ClamAV 20140926
CMC 20140925
Comodo 20140926
Cyren 20140926
DrWeb 20140926
Emsisoft 20140926
ESET-NOD32 20140926
F-Prot 20140926
F-Secure 20140926
Fortinet 20140926
GData 20140926
Ikarus 20140926
Jiangmin 20140925
K7AntiVirus 20140925
K7GW 20140925
Kaspersky 20140926
Kingsoft 20140926
Malwarebytes 20140926
McAfee 20140926
McAfee-GW-Edition 20140925
Microsoft 20140926
eScan 20140926
NANO-Antivirus 20140926
Norman 20140926
nProtect 20140925
Panda 20140925
Qihoo-360 20140926
Rising 20140925
Sophos AV 20140926
SUPERAntiSpyware 20140926
Symantec 20140926
Tencent 20140926
TheHacker 20140924
TotalDefense 20140926
TrendMicro 20140926
TrendMicro-HouseCall 20140926
VBA32 20140926
VIPRE 20140926
ViRobot 20140926
Zillya 20140925
Zoner 20140925
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright © 2014

Product Amnesia Shader Tool
Original name Amnesia Shader Tool.exe
Internal name Amnesia Shader Tool.exe
File version 1.0.0.0
Description Amnesia Shader Tool
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2014-09-26 05:46:53
Entry Point 0x0008B5AE
Number of sections 4
.NET details
Module Version ID ee008b78-66cf-4a24-ac08-f0df06792cbc
TypeLib ID c902753f-1c6d-4d34-aa23-fc33d87ecf8c
PE sections
PE imports
_CorExeMain
Number of PE resources by type
RT_ICON 6
RT_MANIFEST 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
NEUTRAL 9
PE resources
Debug information
ExifTool file metadata
SubsystemVersion
6.0

InitializedDataSize
375808

ImageVersion
0.0

FileSubtype
0

FileVersionNumber
1.0.0.0

UninitializedDataSize
0

LanguageCode
Neutral

FileFlagsMask
0x003f

CharacterSet
Unicode

LinkerVersion
11.0

EntryPoint
0x8b5ae

OriginalFileName
Amnesia Shader Tool.exe

MIMEType
application/octet-stream

LegalCopyright
Copyright 2014

FileVersion
1.0.0.0

TimeStamp
2014:09:26 06:46:53+01:00

FileType
Win32 EXE

PEType
PE32

InternalName
Amnesia Shader Tool.exe

ProductVersion
1.0.0.0

FileDescription
Amnesia Shader Tool

OSVersion
4.0

FileOS
Win32

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CompanyName
Viper85626

CodeSize
562688

ProductName
Amnesia Shader Tool

ProductVersionNumber
1.0.0.0

FileTypeExtension
exe

ObjectFileType
Executable application

AssemblyVersion
1.0.0.0

File identification
MD5 4c34a46ccf50e24970ae5a740fe8ce51
SHA1 8570c1281f008012113b9619102e662c24fb2c60
SHA256 582596c031a5b6c280ea9288be190b9399de3ef84ca62c0dbf44360a329fc2f9
ssdeep
12288:aTi4hqgE3rgnq/QUTWfbcarftx6/FN3CRTlhqgE3rgnq/QUTWfbH:gqTrtTQbVC0RvqTrtTQbH

authentihash 457671469f9aa49c928914c67566cdeab9cf007cdbe837b1631e734fbc14d6e1
imphash f34d5f2d4577ed6d9ceec516c1f5a744
File size 917.5 KB ( 939520 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly

TrID Generic CIL Executable (.NET, Mono, etc.) (55.8%)
Win64 Executable (generic) (21.0%)
Windows screen saver (9.9%)
Win32 Dynamic Link Library (generic) (5.0%)
Win32 Executable (generic) (3.4%)
Tags
peexe assembly

VirusTotal metadata
First submission 2014-09-26 09:17:24 UTC ( 3 years, 2 months ago )
Last submission 2016-01-10 20:12:06 UTC ( 1 year, 11 months ago )
File names Amnesia Shader Tool.exe
filename
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!