| SHA256: | 92044a42a125451f09fb6574b0fd9a1b1ecec66ed4304aa285f85d23e2de77ff |
| File name: | VirusShare_347aed125c0b825eb725a1f6bbe8a82e.bin |
| Detection ratio: | 1 / 72 |
| Analysis date: | 2019-01-07 21:58:02 UTC ( 1 month, 1 week ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| DrWeb | Program.Unwanted.2502 | 20190107 |
| Acronis | 20181227 | |
| Ad-Aware | 20190107 | |
| AegisLab | 20190107 | |
| AhnLab-V3 | 20190107 | |
| Alibaba | 20180921 | |
| ALYac | 20190107 | |
| Antiy-AVL | 20190107 | |
| Arcabit | 20190107 | |
| Avast | 20190107 | |
| Avast-Mobile | 20190107 | |
| AVG | 20190107 | |
| Avira (no cloud) | 20190107 | |
| AVware | 20180925 | |
| Babable | 20180918 | |
| Baidu | 20190107 | |
| BitDefender | 20190107 | |
| Bkav | 20190107 | |
| CAT-QuickHeal | 20190107 | |
| ClamAV | 20190107 | |
| CMC | 20190107 | |
| Comodo | 20190107 | |
| CrowdStrike Falcon (ML) | 20181022 | |
| Cybereason | 20180225 | |
| Cylance | 20190108 | |
| Cyren | 20190107 | |
| eGambit | 20190108 | |
| Emsisoft | 20190107 | |
| Endgame | 20181108 | |
| ESET-NOD32 | 20190108 | |
| F-Prot | 20190108 | |
| F-Secure | 20190106 | |
| Fortinet | 20190108 | |
| GData | 20190108 | |
| Ikarus | 20190108 | |
| Sophos ML | 20181128 | |
| Jiangmin | 20190107 | |
| K7AntiVirus | 20190108 | |
| K7GW | 20190108 | |
| Kaspersky | 20190108 | |
| Kingsoft | 20190108 | |
| Malwarebytes | 20190108 | |
| MAX | 20190108 | |
| McAfee | 20190108 | |
| McAfee-GW-Edition | 20190108 | |
| Microsoft | 20190108 | |
| eScan | 20190108 | |
| NANO-Antivirus | 20190108 | |
| Palo Alto Networks (Known Signatures) | 20190108 | |
| Panda | 20190107 | |
| Qihoo-360 | 20190108 | |
| Rising | 20190108 | |
| SentinelOne (Static ML) | 20181223 | |
| Sophos AV | 20190108 | |
| SUPERAntiSpyware | 20190102 | |
| Symantec | 20190108 | |
| TACHYON | 20190108 | |
| Tencent | 20190108 | |
| TheHacker | 20190106 | |
| TotalDefense | 20190107 | |
| Trapmine | 20190103 | |
| TrendMicro | 20190108 | |
| TrendMicro-HouseCall | 20190108 | |
| Trustlook | 20190108 | |
| VBA32 | 20190104 | |
| VIPRE | 20190108 | |
| ViRobot | 20190107 | |
| Webroot | 20190108 | |
| Yandex | 20181229 | |
| Zillya | 20190105 | |
| ZoneAlarm by Check Point | 20190107 | |
| Zoner | 20190107 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
Authenticode signature block and FileVersionInfo properties
Copyright
Copyright © Remo Software, All rights reserved.
Product Remo Repair MOV
File version 2.0.0.35
Description Remo Repair MOV Setup
Comments This installation was built with Inno Setup.
Signature verification
Signed file, verified signature
Signing date 4:19 AM 2/1/2018
| Signers |
| Counter signers |
Packers identified
F-PROT appended, Aspack, 3, 2, 5, 4, Unicode, INNO
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2016-04-06 14:39:04
Entry Point 0x000117DC
Number of sections 8
PE sections
Overlays
MD5 50e6a91ebbafd77cb8ddae69a9fa68fa
File type data
Offset 573440
Size 8552448
Entropy 8.00
PE imports
Number of PE resources by type
RT_ICON 12
RT_STRING 6
RT_RCDATA 4
RT_MANIFEST 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
ENGLISH US 16
NEUTRAL 9
PE resources
ExifTool file metadata
SubsystemVersion
5.0
Comments
This installation was built with Inno Setup.
LinkerVersion
2.25
ImageVersion
6.0
FileSubtype
0
FileVersionNumber
2.0.0.35
LanguageCode
Neutral
FileFlagsMask
0x003f
FileDescription
Remo Repair MOV Setup
ImageFileCharacteristics
No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi
CharacterSet
Unicode
InitializedDataSize
505856
EntryPoint
0x117dc
MIMEType
application/octet-stream
LegalCopyright
Copyright Remo Software, All rights reserved.
FileVersion
2.0.0.35
TimeStamp
2016:04:06 07:39:04-07:00
FileType
Win32 EXE
PEType
PE32
ProductVersion
2.0.0.35
UninitializedDataSize
0
OSVersion
5.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
Remo Software
CodeSize
66560
ProductName
Remo Repair MOV
ProductVersionNumber
2.0.0.35
FileTypeExtension
exe
ObjectFileType
Executable application
Execution parents
File identification
MD5 347aed125c0b825eb725a1f6bbe8a82e
SHA1 306a003d9e2fc939cebe66c3bc49e83aff56062e
SHA256 92044a42a125451f09fb6574b0fd9a1b1ecec66ed4304aa285f85d23e2de77ff
ssdeep
196608:pQOkBzXDvc5HMxl3lBE10BxqLs1Otf0rizobYQ7BHrw4netYKak:pcdXrTzEQwLsEteixiHHnjKH
File size
8.7 MB ( 9125888 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Executable Delphi generic (52.9%) Win32 Executable (generic) (16.8%) Win16/32 Executable Delphi generic (7.7%) OS/2 Executable (generic) (7.5%) Generic Win/DOS Executable (7.4%) |
Tags
peexe
aspack
signed
overlay
VirusTotal metadata
First submission
2018-02-02 18:59:45 UTC ( 1 year ago )
Last submission
2018-07-30 11:26:08 UTC ( 6 months, 3 weeks ago )
| File names |
remo-repair-mov.exe movfilerepair-windows.exe fixmov.exe fixmp4-win.exe repairvideo-mov-windows.exe remo-repair-mov.exe repairmp4-windows.exe fixquicktimefile-windows.exe movrepair-win.exe videorepairsoftware-win.exe VirusShare_347aed125c0b825eb725a1f6bbe8a82e.bin fixmp4-win.exe |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!
Condensed report! The following is a condensed report of the
behaviour of the file when executed in a controlled environment. The actions
and events described were either performed by the file itself or by any other
process launched by the executed file or subjected to code injection by the
executed file.