» dia_s00970.exe
Overview
Analysis
File Details
Downloads (1)

dia_s00970.exe

OEM Sign 2005

File name:

dia_s00970.exe

Publisher:

OEM Sign 2005 (signed and verified)

MD5:

0f72f06016ee79d2597483b941e0d142

SHA-1:

078de8d6b7a7f1874af9df2a6f19beae49807131

SHA-256:

56b80f0494b1221302a1aeac4ef45141db82a5d1e8300f9ecc71340407dbf94a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 1:06:19 PM UTC (today)

File size:

144.5 KB (147,960 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\dia_s00970.exe

Digital Signature

Signed by:

OEM Sign 2005

Authority:

OEM Sign 2005

Valid from:

8/10/2005 9:41:52 PM

Valid to:

1/1/2040 6:59:59 AM

Subject:

CN=OEM Sign 2005

Issuer:

CN=OEM Sign 2005

Serial number:

334C13E13717F7B34D5F776D2DDDACA4

File PE Metadata

Compilation timestamp:

4/21/2009 5:02:21 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Linker version:

6.24

CTPH (ssdeep):

3072:+Xftbba7TEfTSCH2W5l0+QaRXpjJ1rQ5ngPtR9y6MFMgOg41YcCoJuwfBfgW3Nsh:IVb+K2W5l041rMFMgOh0oJuwtx3Nsh

Entry address:

0x29E0

Entry point:

0D, C0, A0, E1, F0, 58, 2D, E9, 1C, B0, 8D, E2, 04, D0, 4D, E2, 00, 70, A0, E1, 01, 60, A0, E1, 02, 50, A0, E1, 03, 40, A0, E1, 12, 00, 00, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, 08, FB, FF, EB, 00, 40, A0, E1, 20, 40, 0B, E5, 01, 00, 00, EA, 00, 40, A0, E1, 20, 00, 00, EB, 04, 00, A0, E1, 1E, 00, 00, EB, F0, A8, 1B, E9, 04, E0, 2D, E5, 00, 10, A0, E1, 00, 00, 91, E5, 00, 00, 90, E5, 50, 00, 00, EB, 00, 80, BD, E8, 04, E0, 2D, E5, 20, 10, 9F, E5, 18, 00, 9F, E5, 07, 00, 00, EB... 
[+]

Entropy:

5.4316

Code size:

7 KB (7,168 bytes)

The file dia_s00970.exe has been seen being distributed by the following URL.

http://dl4.htc.com//Driver/.../DIA_S00970.exe

Scan dia_s00970.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.