» Elevator.exe
Overview
Analysis
File Details

Elevator.exe

QuickField

Tera Analysis ApS

This is a self-extracting archive and installer.

File name:

Elevator.exe

Publisher:

Tera Analysis (signed by Tera Analysis ApS)

Product:

QuickField

Description:

QuickField™ Autorun's Elevated Setup Launcher

Version:

6.2

MD5:

7a878ac1c81f86578f835225d14feaad

SHA-1:

c8a9f841a8f6dc21ff58682ed5c5b420bb25ce29

SHA-256:

b3a983c9c349be77601b8eecefad251f1f8c8a6f147aabf6d24f88adf0f26a8e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/1/2024 8:36:00 AM UTC (today)

File size:

65 KB (66,512 bytes)

Product version:

6.2.0.1828

Trademarks:

QuickField™ is a trademark of Tera Analysis Ltd.

Original file name:

Elevator.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Tera Analysis ApS

Authority:

Symantec Corporation

Valid from:

9/14/2015 2:00:00 AM

Valid to:

12/14/2017 12:59:59 AM

Subject:

CN=Tera Analysis ApS, O=Tera Analysis ApS, L=Svendborg, S=Denmark, C=DK

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

793B370BEA7EE5C86BDEAB1933654881

File PE Metadata

Compilation timestamp:

10/18/2016 2:45:13 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

768:fQQOfK/rFIJE/IbR7Wxa6hBlyhf0CkkHLY6/PEDl3nu/O8J2rx1yqtNu:fQ1SsRJ4BlkkwYVuZ2rx1fu

Entry address:

0x3740

Entry point:

E8, 2F, 1B, 00, 00, E9, 95, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 14, A2, 40, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 78, A0, 40, 00, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 8B, 55, 08, 56, 57, 85, D2, 74, 07, 8B, 7D, 0C, 85, FF, 75, 13, E8, 04, 08, 00, 00, 6A, 16, 5E, 89, 30, E8, A8, 07, 00, 00, 8B, C6, EB, 33, 8B, 45... 
[+]

Code size:

32.5 KB (33,280 bytes)

Scan Elevator.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.