» dia_s00994.exe
Overview
Analysis
File Details
Downloads (1)

dia_s00994.exe

OEM Sign 2005

File name:

dia_s00994.exe

Publisher:

OEM Sign 2005 (signed and verified)

MD5:

1e4b010f210f9d0228580a0badc428e4

SHA-1:

c550a6fddefe0384b6c3e4c20858f712d96874dd

SHA-256:

bb13fbff544ac924e91618327f865f3e46427ad43e2e6b475d4842a808d61419

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 6:16:51 PM UTC (today)

File size:

169.5 KB (173,560 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\dia_s00994.exe

Digital Signature

Signed by:

OEM Sign 2005

Authority:

OEM Sign 2005

Valid from:

8/10/2005 9:41:52 PM

Valid to:

1/1/2040 6:59:59 AM

Subject:

CN=OEM Sign 2005

Issuer:

CN=OEM Sign 2005

Serial number:

334C13E13717F7B34D5F776D2DDDACA4

File PE Metadata

Compilation timestamp:

4/17/2009 12:21:49 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Linker version:

6.24

CTPH (ssdeep):

3072:CXktbba7TEfTSCHFW5l0+QaRXpjJasIqVLe9SpIULDzVfhOhMv5dVeAgI2dS3SH:0Cb+KFW5l04asPVC9upLDzV5OhMvvgJH

Entry address:

0x29E0

Entry point:

0D, C0, A0, E1, F0, 58, 2D, E9, 1C, B0, 8D, E2, 04, D0, 4D, E2, 00, 70, A0, E1, 01, 60, A0, E1, 02, 50, A0, E1, 03, 40, A0, E1, 12, 00, 00, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, 08, FB, FF, EB, 00, 40, A0, E1, 20, 40, 0B, E5, 01, 00, 00, EA, 00, 40, A0, E1, 20, 00, 00, EB, 04, 00, A0, E1, 1E, 00, 00, EB, F0, A8, 1B, E9, 04, E0, 2D, E5, 00, 10, A0, E1, 00, 00, 91, E5, 00, 00, 90, E5, 50, 00, 00, EB, 00, 80, BD, E8, 04, E0, 2D, E5, 20, 10, 9F, E5, 18, 00, 9F, E5, 07, 00, 00, EB... 
[+]

Entropy:

5.6580

Code size:

7 KB (7,168 bytes)

The file dia_s00994.exe has been seen being distributed by the following URL.

http://dl4.htc.com//Driver/.../DIA_S00994.exe

Scan dia_s00994.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.