home

OziExplorerCE.exe

OziExplorerCE

D & L Software Pty Ltd

This is a setup program which is used to install the application. The file has been seen being downloaded from www.oziexplorer3.com.
Publisher:
D & L Software Pty Ltd

Product:
OziExplorerCE

Version:
2, 0, 0, 0

MD5:
9aaf4cb3d427655c5de0773729c57b58

SHA-1:
372af258257a4338915c821e80ba1b42ec2a6617

SHA-256:
21265260d92835d3edafb62768f5ce158f130ae4ae9faab388c5a6f496bee929

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/29/2024 7:41:43 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.7383

File size:
4.3 MB (4,553,728 bytes)

Product version:
1

Copyright:
Copyright © 2002

Original file name:
OziExplorerCE.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\oziexplorerce.exe

File PE Metadata
Compilation timestamp:
10/26/2015 1:38:19 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:

Linker version:
6.24

CTPH (ssdeep):
98304:DXeGZT20K3Bbeg6RvoJJlFLwA4dUEU//9qCHh9UNmcw391mtUM8aowbcSWl9m:jeGshV4FoJJT9XH0AMNu39cZ8arbcS

Entry address:
0xA7DF80

Entry point:
FF, 4F, 2D, E9, 20, 30, 8F, E2, 07, 00, B3, E8, 10, 0C, 93, E8, 02, 90, A0, E1, 0D, 00, 00, EB, 04, 00, A0, E3, 01, 00, 00, EB, FF, 4F, BD, E8, 20, F0, 9F, E5, 14, F0, 9F, E5, 00, E0, 63, 00, 73, FF, 44, 00, 00, 10, 01, 00, 0F, B6, A7, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 40, B6, 1E, 00, 00, 40, 2D, E9, 42, 00, 00, EB, 3C, 00, 9F, E5, 00, 20, A0, E3, 38, C0, 9F, E5, 0C, 00, 50, E1, 0D, 00, 00, 0A, 00, 30, 90, E5, 0F, 14, 03, E2, 0B, 04, 51, E3, 04, 00, 00, 1A, FF, 14, 03, E2...
 
[+]

Code size:
4.3 MB (4,522,496 bytes)

The file OziExplorerCE.exe has been seen being distributed by the following URL.

http://www.oziexplorer3.com/ozice/downloads/.../OziExplorerCE.exe

Scan OziExplorerCE.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.