Malware scan of OTL.exe (OTL) 30b37076552e49276836d02dd73d038c27dbbee9

File name:

OTL.exe

Publisher:

OldTimer Tools

Product:

OTL

Version:

3.2.69.0

MD5:

4adcfee16ee9978f06157634669d36fb

SHA-1:

30b37076552e49276836d02dd73d038c27dbbee9

SHA-256:

57a3854cb96a6081faf68bf2335049c20e0bbeb506dbd1f82882dd1908d411fd

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

11/2/2024 9:23:34 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/PECompact

7.1.1

Bkav FE

HW32.CDB

1.3.0.4613

File size:

588 KB (602,112 bytes)

Product version:

3.0.0.0

Original file name:

OTL.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\otl.exe

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:xfDIx218i1Ot6p7tsk5ZhGgZI1mcf5Xdoag7Hh5xs+pKnfHpGHI7/lyEbx6l:xvct6pBXogZ1C5NuWzfHkHBaxE

Entry address:

0x1000

Entry point:

B8, 48, AC, 65, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 13, 5F, AC, 93, F6, DA, 0E, 4A, 3E, 62, 1D, 64, 84, 49, A1, B7, 3F, C0, FD, 1C, 14, 0A, AD, 77, 11, D2, DA, EC, 4A, 5B, FE, E7, 49, 6C, 13, 8A, CF, 0A, 76, 44, 8C, E7, 75, 6C, 22, E9, 3C, 43, E7, FE, 78, 10, 09, 4A, 52, 5B, 1B, 27, C8, ED, 69, 81, CA, BA, CB, AE, 8D, DE, 69, E0, D2, 0E, 27, 80, 2E, 95, F9, 01, D6, 3A, D6, 05, 39, 69, 5D, 1A, 62, 3C, 7D, E4, 52, E6, 8C... 
[+]

Entropy:

7.9881 (probably packed)

Code size:

1.9 MB (2,041,344 bytes)

Startup File (All Users Run Once)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Name:

OTL

Command:

"C:\otl.exe"

The file OTL.exe has been seen being distributed by the following 50 URLs.