home

FilelotAx.ocx

파일럿 파일전송 관리자

dreamhands

The file FilelotAx.ocx by dreamhands has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
dreamhands  (signed and verified)

Product:
파일럿 파일전송 관리자

Version:
1.0.0.11

MD5:
b738688bdf0bc6db519fbf528f6cf77b

SHA-1:
fd48e14d1768cd7aee52e906c8abe0134f351fdf

SHA-256:
7e90acc2e6f1853e5c58e5750cc5459529d8388cbdd4830136466bb3751d57fb

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
5/10/2024 10:05:43 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.11.6.17

File size:
2.6 MB (2,675,040 bytes)

Product version:
1.0.0.11

Original file name:
FilelotAx.ocx

File type:
OLE control extension (Win32 OCX)

Common path:
C:\windows\downloaded Program Files\filelotax.ocx

Digital Signature
Signed by:
dreamhands

Authority:
Thawte, Inc.

Valid from:
1/19/2013 9:00:00 AM

Valid to:
2/19/2014 8:59:59 AM

Subject:
CN=dreamhands, OU=Dev. Team, O=dreamhands, L=Haewoondae-gu, S=Busan, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0B697326E41B037E18A3A60272DCE067

Registration
CLSID:
{975EE7B0-8364-4DA9-9BF6-23F8954BD687}

ProgID:
WEBCONTROL.WebControlCtrl.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
3/7/2013 10:49:22 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:DRakmD8o2G1BmREcniQ3Dyhp16VAyL7jInGI6D7neRdM6ZxU:JmDp11aE6P3Dyhp16VAyL7jInCD0i6Z6

Entry address:
0x132134

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 59, B8, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 20, 11, 18, 10, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, FC, 83, 15, 10, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 6A, 00, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF...
 
[+]

Entropy:
5.7226

Code size:
1.3 MB (1,401,856 bytes)

Safe for Initializing Control
CLSID:
{975EE7B0-8364-4DA9-9BF6-23F8954BD687}

CLSID name:
Filelot Activex


Remove FilelotAx.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.