home

wwe_1.64.101.6.exe

carmenbienvenuetechnology.com

The executable wwe_1.64.101.6.exe has been detected as malware by 5 anti-virus scanners.
Publisher:
carmenbienvenuetechnology.com  (signed and verified)

MD5:
f2110e16b482498ff223847901ff18ec

SHA-1:
1cb8b8441ce70a6155b7ff878bfcf1adcaa3eedc

SHA-256:
20d7408b4c092c4dd98bfc5b3b2abbfc5f60537ab32095f1c5b89027aff23019

Scanner detections:
5 / 68

Status:
Malware

Analysis date:
11/23/2024 11:00:43 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

avast!
Win32:Vitro
160327-1

AVG
Win32/Virut
2015.0.4530

Dr.Web
Win32.Virut.56
9.0.1.05190

ESET NOD32
Win32/Virut.NBP virus
8.0.319.0

F-Prot
W32/Virut.AL!Generic
4.6.5.141

File size:
4.4 MB (4,660,224 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\wwe_1.64.101.6.exe

Digital Signature
Signed by:
carmenbienvenuetechnology.com

Authority:
thawte, Inc.

Valid from:
7/31/2015 7:00:00 AM

Valid to:
7/31/2016 6:59:59 AM

Subject:
CN=carmenbienvenuetechnology.com, O=carmenbienvenuetechnology.com, L=Montreal, S=Quebec, C=CA

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
21C6139582F29B42669F41081557587C

File PE Metadata
Compilation timestamp:
1/5/1996 12:59:57 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:AisjNYK6KSH+JqyMf/Qg/AFv2x5zvBZhtytDlroF3yok81o:4JPQlyC/lYFvcMlc4j

Entry address:
0x60D18C

Entry point:
83, 3C, 24, FE, 77, FE, F9, 8D, 64, 24, CC, 84, DB, 60, F6, D4, 8A, FD, BA, 3C, E6, 61, 03, 83, EC, DC, E8, 41, FF, FF, FF, 90, F6, D1, 4B, 66, 4B, 75, FC, 85, C6, 8B, D5, FF, 73, 3C, 59, 83, F8, D9, 81, E9, FD, FF, FF, 7F, 0F, 9C, C6, 73, E5, 90, 90, B6, 24, 8B, FA, 98, 81, D9, E6, 13, 00, 00, 71, D6, F6, D6, 90, F9, 40, 90, FF, B4, 19, E4, 13, 00, 80, 83, C4, 04, 86, EC, 66, 81, 44, 24, FC, B0, BA, 75, BB, 86, C4, 49, 4E, 68, 26, 15, 5D, 4D, BF, AC, 7D, AC, 20, 4F, E8, 17, FF, FF, FF, 89, 74, 24, 44, E8...
 
[+]

Entropy:
7.9959  (probably packed)

Code size:
58 KB (59,392 bytes)

Remove wwe_1.64.101.6.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.