home

o4bt.installer.kbc_net4.exe

O4BT.Installer.Kbc

KBC Group NV

This is a self-extracting archive and installer. The file has been seen being downloaded from www.kbc.be and multiple other hosts.
Publisher:
Microsoft  (signed by KBC Group NV)

Product:
O4BT.Installer.Kbc

Version:
1.0.0.0

MD5:
62207cfe8a84f997821b078d03dc2cb8

SHA-1:
f771b3cc5cf020edb23e1aed2bf21bc5d301a27a

SHA-256:
ac4c1abbb539f93955811cedfc9c134c800e40290bf2b731cd779bdd17eab014

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/17/2025 7:10:08 AM UTC  (today)

File size:
136 KB (139,224 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Microsoft 2013

Original file name:
O4BT.Installer.Kbc.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\o4bt.installer.kbc_net4.exe

Digital Signature
Signed by:
KBC Group NV

Authority:
DigiCert Inc

Valid from:
1/18/2016 1:00:00 AM

Valid to:
1/22/2019 1:00:00 PM

Subject:
CN=KBC Group NV, OU=KBC Group .NET Development Code Signing Certificate, O=KBC Group NV, L=Brussels, C=BE

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
022A11F57A22E72F28B3FD6F9CFF2816

File PE Metadata
Compilation timestamp:
7/13/2016 11:22:33 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:qK5IIS1NWj05SEMXcS1NWjF5SEh7S1NWj85SEb6S1NWja5SEYK2K0chis5e0J:n5IIS/pFgcS/sFh7S/pFb6S/5FYK2Nnu

Entry address:
0x206FE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
122 KB (124,928 bytes)

The file o4bt.installer.kbc_net4.exe has been seen being distributed by the following 2 URLs.

https://www.kbc.be/PBL/CC028/-BZLL4YI/BZLJ1X8/BZLJ1XD/.../~-BZP3KFJ?ngeOrigin=BZQ1I1X

https://multimediafiles.kbcgroup.eu/.../O4BT.Installer.Kbc_NET4.exe

Scan o4bt.installer.kbc_net4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.