OTL.exe

OTL

OldTimer Tools

This is a setup program which is used to install the application. The file has been seen being downloaded from www.geekstogo.com and multiple other hosts.
Publisher:
OldTimer Tools

Product:
OTL

Version:
3.2.69.0

MD5:
4adcfee16ee9978f06157634669d36fb

SHA-1:
30b37076552e49276836d02dd73d038c27dbbee9

SHA-256:
57a3854cb96a6081faf68bf2335049c20e0bbeb506dbd1f82882dd1908d411fd

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/23/2024 1:33:25 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

Bkav FE
HW32.CDB
1.3.0.4613

File size:
588 KB (602,112 bytes)

Product version:
3.0.0.0

Original file name:
OTL.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\otl.exe

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:xfDIx218i1Ot6p7tsk5ZhGgZI1mcf5Xdoag7Hh5xs+pKnfHpGHI7/lyEbx6l:xvct6pBXogZ1C5NuWzfHkHBaxE

Entry address:
0x1000

Entry point:
B8, 48, AC, 65, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 13, 5F, AC, 93, F6, DA, 0E, 4A, 3E, 62, 1D, 64, 84, 49, A1, B7, 3F, C0, FD, 1C, 14, 0A, AD, 77, 11, D2, DA, EC, 4A, 5B, FE, E7, 49, 6C, 13, 8A, CF, 0A, 76, 44, 8C, E7, 75, 6C, 22, E9, 3C, 43, E7, FE, 78, 10, 09, 4A, 52, 5B, 1B, 27, C8, ED, 69, 81, CA, BA, CB, AE, 8D, DE, 69, E0, D2, 0E, 27, 80, 2E, 95, F9, 01, D6, 3A, D6, 05, 39, 69, 5D, 1A, 62, 3C, 7D, E4, 52, E6, 8C...
 
[+]

Entropy:
7.9881  (probably packed)

Code size:
1.9 MB (2,041,344 bytes)

Startup File (All Users Run Once)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Name:
OTL

Command:
"C:\otl.exe"


The file OTL.exe has been seen being distributed by the following 50 URLs.

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://ec.ccm2.net/br.ccm.net/download/.../OTL--.exe

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

https://apps.tourocloudbackup.com/api/.../geta?redir=1&resume=1&sharecode=ZD7P2KRBL3&mute=1&tempcode=512009408

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://dpcdn-s11.pl/.../OTL.exe

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

http://api.viglink.com/api/click?format=go&key=0b5b859b94834fdaedf865971821d740&loc=http://www.smartestcomputing.us.com/topic/51849-boot-up-not-successful/&v=1&libId=7d0b474b-f147-45da-95ae-ec298ce335f7&out=http://oldtimer.geekstogo.com/OTL.exe&ref=https://www.google.co.za/.../strong>&jsonp=vglnk_jsonp_13833867326156

http://www.windoctor.it/?wpdmdl=58

http://www.geekstogo.com/forum/files/go/.../otl-oldtimers-list-it

Latest 30 of 134 download URLs

Scan OTL.exe - Powered by Reason Core Security