home

dotNET_Reactor.exe

Product

Eziriz e.K.

Publisher:
EZIRIZ  (signed by Eziriz e.K.)

Product:
Product

Description:
.NET Reactor

Version:
4.9.0.0

MD5:
9a44c2dd1969c581d08e1b4571654569

SHA-1:
a4f8d79dd7ca69a603db58ebeb01529740592884

SHA-256:
e5ddf7fbc114821965f27bdf867b2b99ce8acc0a1cdf346e5d295d8528045635

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/18/2024 4:36:12 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.Gen
7.11.30.172

File size:
7.8 MB (8,165,016 bytes)

Product version:
4.9.0.0

Copyright:
Copyright @ EZIRIZ

Original file name:
dotNET_Reactor.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\eziriz\.net reactor\dotnet_reactor.exe

Digital Signature
Signed by:
Eziriz e.K.

Authority:
COMODO CA Limited

Valid from:
9/18/2013 5:00:00 PM

Valid to:
9/19/2015 4:59:59 PM

Subject:
CN=Eziriz e.K., O=Eziriz e.K., STREET=Vogelweg 9, L=Brome, S=Niedersachsen, PostalCode=38465, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CA7FF879A5E31EF522F20CD3ADDA3D18

File PE Metadata
Compilation timestamp:
7/28/2014 7:32:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:yMVxNw7f4YE5FKlBGadUW/MrBMKwXoZ0CV+LomrPWZNdKe:lxKWFyGayO9hvreZNdKe

Entry address:
0x7BA09E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.2043

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
7.7 MB (8,094,208 bytes)

Scan dotNET_Reactor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.