| SHA256: | 9456ba3236c05afa7e9d744207fe90420315caa7af4cc77f9f6c4159fb4fba39 |
| File name: | KeePass.exe |
| Detection ratio: | 19 / 52 |
| Analysis date: | 2016-07-13 11:54:42 UTC ( 1 year, 5 months ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| Ad-Aware | Gen:Variant.Razy.74675 | 20160713 |
| AegisLab | Troj.Msil.Inject!c | 20160713 |
| ALYac | Gen:Variant.Razy.74675 | 20160713 |
| Arcabit | Trojan.Razy.D123B3 | 20160713 |
| BitDefender | Gen:Variant.Razy.74675 | 20160713 |
| Emsisoft | Gen:Variant.Razy.74675 (B) | 20160713 |
| F-Secure | Gen:Variant.Razy.74675 | 20160713 |
| Fortinet | W32/Inject.ABGKZ!tr | 20160713 |
| GData | Gen:Variant.Razy.74675 | 20160713 |
| Kaspersky | Trojan.MSIL.Inject.abgkz | 20160713 |
| McAfee | Artemis!DC3CB9F60B2F | 20160713 |
| McAfee-GW-Edition | Artemis | 20160713 |
| eScan | Gen:Variant.Razy.74675 | 20160713 |
| Panda | Trj/GdSda.A | 20160712 |
| Qihoo-360 | Win32/Trojan.75e | 20160713 |
| Sophos AV | Mal/Generic-S | 20160713 |
| Symantec | Trojan.Gen.2 | 20160713 |
| Tencent | Msil.Trojan.Inject.Wsae | 20160713 |
| ViRobot | Trojan.Win32.Z.Razy.2744832[h] | 20160713 |
| AhnLab-V3 | 20160713 | |
| Alibaba | 20160713 | |
| Antiy-AVL | 20160713 | |
| Avast | 20160713 | |
| AVG | 20160713 | |
| AVware | 20160713 | |
| Baidu | 20160713 | |
| Bkav | 20160712 | |
| CAT-QuickHeal | 20160712 | |
| ClamAV | 20160713 | |
| CMC | 20160711 | |
| Comodo | 20160713 | |
| Cyren | 20160713 | |
| DrWeb | 20160713 | |
| ESET-NOD32 | 20160712 | |
| F-Prot | 20160713 | |
| Ikarus | 20160713 | |
| Jiangmin | 20160713 | |
| K7AntiVirus | 20160713 | |
| K7GW | 20160713 | |
| Kingsoft | 20160713 | |
| Malwarebytes | 20160713 | |
| Microsoft | 20160713 | |
| NANO-Antivirus | 20160713 | |
| nProtect | 20160713 | |
| SUPERAntiSpyware | 20160713 | |
| TheHacker | 20160712 | |
| TrendMicro | 20160713 | |
| TrendMicro-HouseCall | 20160713 | |
| VBA32 | 20160712 | |
| VIPRE | 20160713 | |
| Yandex | 20160712 | |
| Zillya | 20160713 | |
| Zoner | 20160713 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright © 2003-2016 Dominik Reichl
Product KeePass
Original name KeePass.exe
Internal name KeePass
File version 2.32.0.0
Description KeePass
Comments KeePass Password Safe
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Entry Point 0x0029ECCE
Number of sections 4
.NET details
Module Version ID
52dbeed8-bb4f-4f48-b9dd-40cb96c1b588
TypeLib ID
000214f9-0000-0000-c000-000000000046
PE sections
PE imports
Number of PE resources by type
RT_VERSION 1
Number of PE resources by language
NEUTRAL 1
PE resources
ExifTool file metadata
SubsystemVersion
4.0
Comments
KeePass Password Safe
LinkerVersion
8.0
ImageVersion
0.0
FileSubtype
0
FileVersionNumber
2.32.0.0
LanguageCode
Invariant
FileFlagsMask
0x003f
FileDescription
KeePass
CharacterSet
Unicode
InitializedDataSize
4096
EntryPoint
0x29ecce
OriginalFileName
KeePass.exe
MIMEType
application/octet-stream
LegalCopyright
Copyright 2003-2016 Dominik Reichl
FileVersion
2.32.0.0
TimeStamp
0000:00:00 00:00:00
FileType
Win32 EXE
PEType
PE32
InternalName
KeePass
ProductVersion
2.32.0.0
UninitializedDataSize
0
OSVersion
4.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
Dominik Reichl
CodeSize
2739712
ProductName
KeePass
ProductVersionNumber
2.32.0.0
FileTypeExtension
exe
ObjectFileType
Dynamic link library
Compressed bundles
File identification
MD5 dc3cb9f60b2fb18c2730e12cffb8c593
SHA1 bc631724ba52eef9626156fbf918a6a356cfcaff
SHA256 9456ba3236c05afa7e9d744207fe90420315caa7af4cc77f9f6c4159fb4fba39
ssdeep
49152:LQTuiXIq3q9kg888888888H88888888888888888888888887AmF1xduelS6ReRE:LQTuiXIwzs1duelS6U/z
File size
2.6 MB ( 2744832 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
| TrID |
Generic CIL Executable (.NET, Mono, etc.) (45.1%) Win32 Executable MS Visual C++ (generic) (19.2%) Win64 Executable (generic) (17.0%) Windows screen saver (8.0%) Win32 Dynamic Link Library (generic) (4.0%) |
Tags
peexe
assembly
via-tor
VirusTotal metadata
First submission
2016-07-10 17:19:01 UTC ( 1 year, 5 months ago )
Last submission
2017-10-22 12:10:26 UTC ( 2 months, 2 weeks ago )
| File names |
KeePass-2.32+dfsg-1.exe KeePass KeePass_2.32_Linux.exe KeePass.exe KeePass.exe.virus KeePass.exe.bak |
Advanced heuristic and reputation engines
TrendMicro-HouseCall
TrendMicro's heuristic engine has flagged this file as: TROJ_GEN.R00XC0EGG16.
F-Secure Deepguard
Suspicious:W32/Malware!Online
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!