| SHA256: | e06a65cae4c4bcbc61be84a158f4d7f990ea50f679b787e2efb1fe9fd14e38d8 |
| File name: | 443513 |
| Detection ratio: | 0 / 57 |
| Analysis date: | 2016-04-03 07:41:26 UTC ( 2 years, 5 months ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| Ad-Aware | 20160403 | |
| AegisLab | 20160403 | |
| AhnLab-V3 | 20160402 | |
| Alibaba | 20160401 | |
| ALYac | 20160403 | |
| Antiy-AVL | 20160403 | |
| Arcabit | 20160403 | |
| Avast | 20160403 | |
| AVG | 20160403 | |
| Avira (no cloud) | 20160402 | |
| AVware | 20160403 | |
| Baidu | 20160402 | |
| Baidu-International | 20160402 | |
| BitDefender | 20160403 | |
| Bkav | 20160402 | |
| CAT-QuickHeal | 20160402 | |
| ClamAV | 20160402 | |
| CMC | 20160401 | |
| Comodo | 20160402 | |
| Cyren | 20160403 | |
| DrWeb | 20160403 | |
| Emsisoft | 20160403 | |
| ESET-NOD32 | 20160403 | |
| F-Prot | 20160403 | |
| F-Secure | 20160403 | |
| Fortinet | 20160403 | |
| GData | 20160403 | |
| Ikarus | 20160403 | |
| Jiangmin | 20160403 | |
| K7AntiVirus | 20160403 | |
| K7GW | 20160403 | |
| Kaspersky | 20160402 | |
| Kingsoft | 20160403 | |
| Malwarebytes | 20160403 | |
| McAfee | 20160403 | |
| McAfee-GW-Edition | 20160403 | |
| Microsoft | 20160402 | |
| eScan | 20160403 | |
| NANO-Antivirus | 20160403 | |
| nProtect | 20160401 | |
| Panda | 20160402 | |
| Qihoo-360 | 20160403 | |
| Rising | 20160403 | |
| Sophos AV | 20160403 | |
| SUPERAntiSpyware | 20160403 | |
| Symantec | 20160331 | |
| Tencent | 20160403 | |
| TheHacker | 20160403 | |
| TotalDefense | 20160402 | |
| TrendMicro | 20160403 | |
| TrendMicro-HouseCall | 20160403 | |
| VBA32 | 20160401 | |
| VIPRE | 20160403 | |
| ViRobot | 20160402 | |
| Yandex | 20160316 | |
| Zillya | 20160402 | |
| Zoner | 20160403 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
Authenticode signature block and FileVersionInfo properties
Copyright
Copyright (C) Bluebit Software
Product .NET Matrix Library 5.0.1 (32-bit)
Original name NML50_x86.exe
Internal name NML50_x86
File version 5.0.1
Description This installer database contains the logic and data required to install .NET Matrix Library 5.0.1 (32-bit) .
Signature verification
Signed file, verified signature
Signing date 6:32 PM 6/3/2010
| Signers |
| Counter signers |
Packers identified
F-PROT UPX, appended, 7Z, Unicode, UTF-8
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2010-05-03 08:11:22
Entry Point 0x0002453E
Number of sections 4
PE sections
Overlays
MD5 a905c0389bf6dec43b365f899f8994a2
File type application/x-ms-dos-executable
Offset 309760
Size 9424808
Entropy 8.00
PE imports
Number of PE resources by type
RT_ICON 12
RT_DIALOG 10
RT_STRING 8
RTF_FILE 2
RT_MENU 2
IMAGE_FILE 2
RT_MANIFEST 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
ENGLISH US 39
PE resources
ExifTool file metadata
SubsystemVersion
5.0
InitializedDataSize
104960
ImageVersion
0.0
ProductName
.NET Matrix Library 5.0.1 (32-bit)
FileVersionNumber
5.0.1.0
UninitializedDataSize
0
LanguageCode
English (U.S.)
FileFlagsMask
0x003f
ImageFileCharacteristics
No relocs, Executable, 32-bit
CharacterSet
Unicode
LinkerVersion
9.0
FileTypeExtension
exe
OriginalFileName
NML50_x86.exe
MIMEType
application/octet-stream
Subsystem
Windows GUI
FileVersion
5.0.1
TimeStamp
2010:05:03 09:11:22+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
NML50_x86
ProductVersion
5.0.1
FileDescription
This installer database contains the logic and data required to install .NET Matrix Library 5.0.1 (32-bit) .
OSVersion
5.0
FileOS
Win32
LegalCopyright
Copyright (C) Bluebit Software
MachineType
Intel 386 or later, and compatibles
CompanyName
Bluebit Software
CodeSize
203776
FileSubtype
0
ProductVersionNumber
5.0.1.0
EntryPoint
0x2453e
ObjectFileType
Dynamic link library
File identification
MD5 cf7d9d6b66943798557636f8c93b46a6
SHA1 e01345770502c47f2aa2bd937f2d64da85efcc21
SHA256 e06a65cae4c4bcbc61be84a158f4d7f990ea50f679b787e2efb1fe9fd14e38d8
ssdeep
196608:tQ2Bmno6rtPQRxPt4F4EEhkQ+1mZYiEnaPJNEdMwy26sLGac:hBmoCtPKAzEz+1m+ii4TExT5Cac
File size
9.3 MB ( 9734568 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Executable MS Visual C++ (generic) (41.0%) Win64 Executable (generic) (36.3%) Win32 Dynamic Link Library (generic) (8.6%) Win32 Executable (generic) (5.9%) OS/2 Executable (generic) (2.6%) |
Tags
revoked-cert
peexe
signed
upx
overlay
VirusTotal metadata
First submission
2010-06-05 13:40:52 UTC ( 8 years, 3 months ago )
Last submission
2016-11-28 22:22:32 UTC ( 1 year, 9 months ago )
| File names |
NML50_x86 nml50_x86.exe 443513 NML50_x86.exe NML50_x86.exe E06A65CAE4C4BCBC61BE84A158F4D7F990EA50F679B787E2EFB1FE9FD14E38D8 |
Advanced heuristic and reputation engines
Symantec reputation
Suspicious.Insight
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!