» wwe_1.64.101.6.exe
Overview
Analysis
File Details

wwe_1.64.101.6.exe

carmenbienvenuetechnology.com

The executable wwe_1.64.101.6.exe has been detected as malware by 5 anti-virus scanners.

File name:

wwe_1.64.101.6.exe

Publisher:

carmenbienvenuetechnology.com (signed and verified)

MD5:

f2110e16b482498ff223847901ff18ec

SHA-1:

1cb8b8441ce70a6155b7ff878bfcf1adcaa3eedc

SHA-256:

20d7408b4c092c4dd98bfc5b3b2abbfc5f60537ab32095f1c5b89027aff23019

Scanner detections:

5 / 68

Status:

Malware

Analysis date:

12/26/2024 4:25:07 AM UTC (today)

Scan engine

Detection

Engine version

avast!

Win32:Vitro

160327-1

AVG

Win32/Virut

2015.0.4530

Dr.Web

Win32.Virut.56

9.0.1.05190

ESET NOD32

Win32/Virut.NBP virus

8.0.319.0

F-Prot

W32/Virut.AL!Generic

4.6.5.141

File size:

4.4 MB (4,660,224 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Documents and Settings\{user}\Local settings\temp\wwe_1.64.101.6.exe

Digital Signature

Signed by:

carmenbienvenuetechnology.com

Authority:

thawte, Inc.

Valid from:

7/31/2015 7:00:00 AM

Valid to:

7/31/2016 6:59:59 AM

Subject:

CN=carmenbienvenuetechnology.com, O=carmenbienvenuetechnology.com, L=Montreal, S=Quebec, C=CA

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

21C6139582F29B42669F41081557587C

File PE Metadata

Compilation timestamp:

1/5/1996 12:59:57 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

98304:AisjNYK6KSH+JqyMf/Qg/AFv2x5zvBZhtytDlroF3yok81o:4JPQlyC/lYFvcMlc4j

Entry address:

0x60D18C

Entry point:

83, 3C, 24, FE, 77, FE, F9, 8D, 64, 24, CC, 84, DB, 60, F6, D4, 8A, FD, BA, 3C, E6, 61, 03, 83, EC, DC, E8, 41, FF, FF, FF, 90, F6, D1, 4B, 66, 4B, 75, FC, 85, C6, 8B, D5, FF, 73, 3C, 59, 83, F8, D9, 81, E9, FD, FF, FF, 7F, 0F, 9C, C6, 73, E5, 90, 90, B6, 24, 8B, FA, 98, 81, D9, E6, 13, 00, 00, 71, D6, F6, D6, 90, F9, 40, 90, FF, B4, 19, E4, 13, 00, 80, 83, C4, 04, 86, EC, 66, 81, 44, 24, FC, B0, BA, 75, BB, 86, C4, 49, 4E, 68, 26, 15, 5D, 4D, BF, AC, 7D, AC, 20, 4F, E8, 17, FF, FF, FF, 89, 74, 24, 44, E8... 
[+]

Entropy:

7.9959 (probably packed)

Code size:

58 KB (59,392 bytes)

Remove wwe_1.64.101.6.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.