| SHA256: | e6c95255a8926b0f99d7b83bd00b7062bea8e815838e7e8cda471edc32253ffb |
| File name: | xyBz4TZ6HvwJZdFmcWb.exe |
| Detection ratio: | 8 / 69 |
| Analysis date: | 2018-11-14 03:04:09 UTC ( 3 months ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| CAT-QuickHeal | Trojan.Emotet.X4 | 20181113 |
| CrowdStrike Falcon (ML) | malicious_confidence_100% (D) | 20181022 |
| Cylance | Unsafe | 20181114 |
| Endgame | malicious (high confidence) | 20181108 |
| Sophos ML | heuristic | 20181108 |
| Qihoo-360 | HEUR/QVM20.1.311B.Malware.Gen | 20181114 |
| SentinelOne (Static ML) | static engine - malicious | 20181011 |
| Symantec | ML.Attribute.HighConfidence | 20181114 |
| Ad-Aware | 20181112 | |
| AegisLab | 20181114 | |
| AhnLab-V3 | 20181114 | |
| Alibaba | 20180921 | |
| ALYac | 20181114 | |
| Antiy-AVL | 20181114 | |
| Arcabit | 20181114 | |
| Avast | 20181114 | |
| Avast-Mobile | 20181113 | |
| AVG | 20181114 | |
| Avira (no cloud) | 20181114 | |
| Babable | 20180918 | |
| Baidu | 20181112 | |
| BitDefender | 20181114 | |
| Bkav | 20181113 | |
| ClamAV | 20181114 | |
| CMC | 20181113 | |
| Comodo | 20181114 | |
| Cybereason | 20180225 | |
| Cyren | 20181114 | |
| DrWeb | 20181114 | |
| eGambit | 20181114 | |
| Emsisoft | 20181114 | |
| ESET-NOD32 | 20181113 | |
| F-Prot | 20181114 | |
| F-Secure | 20181114 | |
| Fortinet | 20181114 | |
| GData | 20181114 | |
| Ikarus | 20181113 | |
| Jiangmin | 20181114 | |
| K7AntiVirus | 20181113 | |
| K7GW | 20181113 | |
| Kaspersky | 20181113 | |
| Kingsoft | 20181114 | |
| Malwarebytes | 20181113 | |
| MAX | 20181114 | |
| McAfee | 20181113 | |
| McAfee-GW-Edition | 20181113 | |
| Microsoft | 20181114 | |
| eScan | 20181114 | |
| NANO-Antivirus | 20181114 | |
| Palo Alto Networks (Known Signatures) | 20181114 | |
| Panda | 20181113 | |
| Rising | 20181114 | |
| Sophos AV | 20181113 | |
| SUPERAntiSpyware | 20181114 | |
| Symantec Mobile Insight | 20181108 | |
| TACHYON | 20181114 | |
| Tencent | 20181114 | |
| TheHacker | 20181113 | |
| TotalDefense | 20181113 | |
| TrendMicro | 20181114 | |
| TrendMicro-HouseCall | 20181114 | |
| Trustlook | 20181114 | |
| VBA32 | 20181113 | |
| VIPRE | 20181113 | |
| ViRobot | 20181113 | |
| Webroot | 20181114 | |
| Yandex | 20181113 | |
| Zillya | 20181113 | |
| ZoneAlarm by Check Point | 20181114 | |
| Zoner | 20181114 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
© Micros
Internal name OLESVR32
File version 6.1.7600.1
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2018-11-14 11:01:10
Entry Point 0x0000ABC1
Number of sections 6
PE sections
PE imports
Number of PE resources by type
RT_VERSION 1
Number of PE resources by language
NEUTRAL 1
PE resources
Debug information
ExifTool file metadata
CodeSize
49152
UninitializedDataSize
0
LinkerVersion
12.0
ImageVersion
0.0
FileVersionNumber
1.4.20030.62408
LanguageCode
Neutral
FileFlagsMask
0x003f
ImageFileCharacteristics
No relocs, Executable, 32-bit
CharacterSet
Unicode
InitializedDataSize
417792
EntryPoint
0xabc1
MIMEType
application/octet-stream
LegalCopyright
Micros
FileVersion
6.1.7600.1
TimeStamp
2018:11:14 12:01:10+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
OLESVR32
ProductVersion
6.1.7600.16
SubsystemVersion
5.0
OSVersion
5.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
Micro
LegalTrademarks
QQQQQqA, Netscape
FileSubtype
0
ProductVersionNumber
1.4.0.0
FileTypeExtension
exe
ObjectFileType
Dynamic link library
Execution parents
File identification
MD5 684ed792f2ae26e0fbfa34ac1cef5f40
SHA1 a687998b7ad3624122e3bfc1ad5f343cd9b33af2
SHA256 e6c95255a8926b0f99d7b83bd00b7062bea8e815838e7e8cda471edc32253ffb
ssdeep
3072:Otn/6kRT8oZbkC8HaoR/OG1xYdUGz29ppja:OpykV8oJlDJdURXp
File size
448.0 KB ( 458752 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Dynamic Link Library (generic) (38.4%) Win32 Executable (generic) (26.3%) OS/2 Executable (generic) (11.8%) Generic Win/DOS Executable (11.6%) DOS Executable Generic (11.6%) |
Tags
peexe
VirusTotal metadata
First submission
2018-11-14 03:04:09 UTC ( 3 months ago )
Last submission
2018-12-30 06:50:49 UTC ( 1 month, 2 weeks ago )
| File names |
84.exe OLESVR32 2547.exe 140756.exe elementstatus.exe knownelement.exe 19580418.exe output.114494843.txt 9364266.exe 8.exe cbgndmtpbt.exe extplain.exe output.114813139.txt 82.exe 1.exe 59.exe 15.exe 404.exe 350.exe 41631.exe 0NI01HO.EXE 9XRJJ.EXE 3242803.exe 3603561.exe 69199.exe |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!