home

vske0o3j.01b

1.4.0.7244 2016/03/11 05:31 1.4.0 #56

BitRaider LLC

Publisher:
BitRaider, LLC  (signed by BitRaider LLC)

Product:
1.4.0.7244 2016/03/11 05:31 1.4.0 #56

Description:
BitRaider Exception Handler

Version:
1.4.0.7244

MD5:
38426f16b5e7e927bda20161ad1797a1

SHA-1:
f741b9812afc773c52d444b0c893e33d23a01117

SHA-256:
e403cc66d3df00f1ce14379cd2d8f6a391c194eb6b6813ab83a1857675ef611e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 1:06:42 AM UTC  (today)

File size:
1.8 MB (1,878,792 bytes)

Product version:
1.4.0.7244

Copyright:
Copyright (C) 2014 BitRaider, LLC

Original file name:
BRException.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\hc_attk\vske0o3j.01b

Digital Signature
Signed by:
BitRaider LLC

Authority:
VeriSign, Inc.

Valid from:
7/3/2015 12:00:00 AM

Valid to:
8/1/2018 11:59:59 PM

Subject:
CN=BitRaider LLC, O=BitRaider LLC, L=Jacksonville, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7E6AD422896928C39F54CB79E991AFFF

File PE Metadata
Compilation timestamp:
3/11/2016 4:33:06 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:MRuAncvaI78fwPTkmM2sCwP51iPSm0oui+ShzWEGDbSHM78SwPTkFeEKoBEwd40k:MRlncB81CwP51iq/hl2WEGaS8orUL

Entry address:
0xD0F0

Entry point:
E8, E3, 79, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 10, 79, 42, 00, 89, 0D, 0C, 79, 42, 00, 89, 15, 08, 79, 42, 00, 89, 1D, 04, 79, 42, 00, 89, 35, 00, 79, 42, 00, 89, 3D, FC, 78, 42, 00, 66, 8C, 15, 28, 79, 42, 00, 66, 8C, 0D, 1C, 79, 42, 00, 66, 8C, 1D, F8, 78, 42, 00, 66, 8C, 05, F4, 78, 42, 00, 66, 8C, 25, F0, 78, 42, 00, 66, 8C, 2D, EC, 78, 42, 00, 9C, 8F, 05, 20, 79, 42, 00, 8B, 45, 00, A3, 14, 79, 42, 00, 8B, 45, 04, A3, 18, 79, 42, 00, 8D, 45, 08, A3, 24, 79, 42...
 
[+]

Entropy:
7.0810

Code size:
120.5 KB (123,392 bytes)

Scan vske0o3j.01b - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.