| SHA256: | 87fe54fdc6a5e58c65476c0c28b57d82b092aeed38b90c135145738887db3c4f |
| Nombre: | WindowexeAllkiller.exe |
| Detecciones: | 2 / 57 |
| Fecha de análisis: | 2016-10-03 04:58:24 UTC ( hace 11 meses, 3 semanas ) Ver el más reciente |
| Antivirus | Resultado | Actualización |
|---|---|---|
| ESET-NOD32 | a variant of MSIL/HackTool.Agent.AQ potentially unsafe | 20161002 |
| VBA32 | Trojan.MSIL.gen.16 | 20161001 |
| Ad-Aware | 20161003 | |
| AegisLab | 20161003 | |
| AhnLab-V3 | 20161002 | |
| Alibaba | 20160930 | |
| ALYac | 20160930 | |
| Antiy-AVL | 20161003 | |
| Arcabit | 20161003 | |
| Avast | 20161003 | |
| AVG | 20161003 | |
| Avira (no cloud) | 20161002 | |
| AVware | 20161003 | |
| Baidu | 20161001 | |
| BitDefender | 20161003 | |
| Bkav | 20161002 | |
| CAT-QuickHeal | 20161001 | |
| ClamAV | 20161003 | |
| CMC | 20160930 | |
| Comodo | 20161003 | |
| CrowdStrike Falcon (ML) | 20160725 | |
| Cyren | 20161003 | |
| DrWeb | 20161003 | |
| Emsisoft | 20161003 | |
| F-Prot | 20160926 | |
| F-Secure | 20161003 | |
| Fortinet | 20161003 | |
| GData | 20161003 | |
| Ikarus | 20161002 | |
| Sophos ML | 20160928 | |
| Jiangmin | 20161003 | |
| K7AntiVirus | 20161002 | |
| K7GW | 20161003 | |
| Kaspersky | 20161003 | |
| Kingsoft | 20161003 | |
| Malwarebytes | 20161003 | |
| McAfee | 20161003 | |
| McAfee-GW-Edition | 20161003 | |
| Microsoft | 20161003 | |
| eScan | 20161003 | |
| NANO-Antivirus | 20161003 | |
| nProtect | 20161003 | |
| Panda | 20161002 | |
| Qihoo-360 | 20161003 | |
| Rising | 20161003 | |
| Sophos AV | 20161003 | |
| SUPERAntiSpyware | 20161002 | |
| Symantec | 20161003 | |
| Tencent | 20161003 | |
| TheHacker | 20161001 | |
| TrendMicro | 20161003 | |
| TrendMicro-HouseCall | 20161003 | |
| VIPRE | 20161003 | |
| ViRobot | 20161003 | |
| Yandex | 20161002 | |
| Zillya | 20161001 | |
| Zoner | 20161003 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
Authenticode signature block and FileVersionInfo properties
Copyright
Copyright © WindowexeAllkiller.com
Product WindowexeAllkiller
Original name WindowexeAllkiller.exe
Internal name WindowexeAllkiller.exe
File version 1.0.6120.25113
Description WindowexeAllkiller
Comments windowexe@windowexe.com
Signature verification
Signed file, verified signature
Signing date 5:57 AM 10/3/2016
| Signers |
| Counter signers |
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2016-10-03 04:57:38
Entry Point 0x0006128E
Number of sections 4
.NET details
Module Version ID
b6578139-ebdd-45ca-a26a-984fb296efc8
TypeLib ID
026b74b4-d6bd-4e35-b7e4-1e1a83126caf
PE sections
Overlays
MD5 50e15b0a16eaea6524af408bb68bec9f
File type data
Offset 429056
Size 5800
Entropy 7.37
PE imports
Number of PE resources by type
RT_ICON 4
RT_MANIFEST 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
NEUTRAL 7
PE resources
Debug information
ExifTool file metadata
SubsystemVersion
4.0
Comments
windowexe@windowexe.com
LinkerVersion
11.0
ImageVersion
0.0
FileSubtype
0
FileVersionNumber
1.0.6120.25113
LanguageCode
Neutral
FileFlagsMask
0x003f
FileDescription
WindowexeAllkiller
CharacterSet
Unicode
InitializedDataSize
37888
EntryPoint
0x6128e
OriginalFileName
WindowexeAllkiller.exe
MIMEType
application/octet-stream
LegalCopyright
Copyright WindowexeAllkiller.com
FileVersion
1.0.6120.25113
TimeStamp
2016:10:03 05:57:38+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
WindowexeAllkiller.exe
ProductVersion
1.0.6120.25113
UninitializedDataSize
0
OSVersion
4.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
http://windowexeallkiller.com
CodeSize
390144
ProductName
WindowexeAllkiller
ProductVersionNumber
1.0.6120.25113
FileTypeExtension
exe
ObjectFileType
Executable application
AssemblyVersion
1.0.6120.25113
File identification
MD5 7f529eaf61ab334fe1aaca09f5a7c2c8
SHA1 84d1dad4d6f36545df522bb7f79e193f16c7b44e
SHA256 87fe54fdc6a5e58c65476c0c28b57d82b092aeed38b90c135145738887db3c4f
ssdeep
6144:con07A2XsBzQPYMnTMxqYbx878XLdf9E4UuYXX8:rMX0zjQQgY1Wu6M
Tamaño del fichero
424.7 KB ( 434856 bytes )
Tipo Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
| TrID |
Win64 Executable (generic) (47.7%) Windows screen saver (22.6%) Win32 Dynamic Link Library (generic) (11.3%) Win32 Executable (generic) (7.7%) Win16/32 Executable Delphi generic (3.5%) |
Tags
peexe
assembly
signed
overlay
VirusTotal metadata
First submission
2016-10-03 04:58:24 UTC ( hace 11 meses, 3 semanas )
Last submission
2016-10-03 04:58:24 UTC ( hace 11 meses, 3 semanas )
| Nombres |
WindowexeAllkiller.exe |
No hay comentarios.
Ningún usuario ha comentado aún. ¡Sea el primero en hacerlo!
No ha iniciado sesión. Solo los usuarios registrados pueden escribir comentarios.
No hay votos.
Nadie ha votado aún. ¡Sea el primero!