home

pwrmxen.exe

Diskette Creator

Kroll Ontrack Inc.

Publisher:
Kroll Ontrack Inc.

Product:
Diskette Creator

Description:
Diskette Creator for Windows

Version:
4.45

MD5:
8d708f610ef3049119b37a4acd732e85

SHA-1:
9703c9ecb1d0037225d47af80e8afb853870c0e6

SHA-256:
b23d558e5285201a34ab376a5f1a3f771c6de8dc5945e1f34be8200acb5d4757

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:49:10 PM UTC  (today)

File size:
1 MB (1,079,422 bytes)

Product version:
4.45

Copyright:
(c)1995-2004 Kroll Ontrack Inc.

Trademarks:
ONTRACK(R) is a registered trademark of Kroll Ontrack Inc.

Original file name:
DC.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\pwrmxen.exe

File PE Metadata
Compilation timestamp:
1/3/2027 3:16:03 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:in/OdLsXGiSqKpe448OMn6zGGCwrAO28WVj:jQXfKpe45OM6HCwrARj

Entry address:
0x10000

Entry point:
A1, 59, 00, 43, 00, C1, E0, 02, A3, 5D, 00, 43, 00, 57, 51, 33, C0, BF, E8, 7B, 43, 00, B9, 90, 83, 43, 00, 3B, CF, 76, 05, 2B, CF, FC, F3, AA, 59, 5F, 64, 67, 8B, 16, 04, 00, 8B, 42, F8, A3, 61, 00, 43, 00, 8B, 42, FC, A3, 65, 00, 43, 00, 83, EA, 04, 89, 15, 48, 7F, 43, 00, 83, EA, 04, 3B, D4, 73, 02, 8B, E2, 6A, 00, E8, 4A, A2, 01, 00, 59, 68, 2C, 00, 43, 00, 6A, 00, E8, F0, E7, 01, 00, A3, 6A, 00, 43, 00, 6A, 00, E9, 1E, D8, 01, 00, E9, E5, A2, 01, 00, 00, 55, 8B, EC, 83, C4, DC, 53, 8B, 5D, 08, B8, 80...
 
[+]

Entropy:
7.5387

Code size:
123.5 KB (126,464 bytes)

The file pwrmxen.exe has been seen being distributed by the following 3 URLs.

http://www.tacktech.com/download.cfm?file=mirror/.../PwrMxEn.exe

http://files7.majorgeeks.com/files/1eee58f7a5d6bd6df171b1d131acd79a/.../PwrMxEn.exe

http://files1.majorgeeks.com/24ec8468b67314c2013d215b77034476/.../PwrMxEn.exe

Scan pwrmxen.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.