home

oesisdiagnose_v3.exe

OesisDiagnose

Nevis Networks

Publisher:
OPSWAT Inc.  (signed by Nevis Networks)

Product:
OesisDiagnose

Description:
OesisDiagnose_V3

Version:
3.5.7585.2

MD5:
d49528449b77878572d3c052922a4d39

SHA-1:
43506300a2133c6869473e0dad54a1c2f73a0197

SHA-256:
77fd687d06877a085b26c4887ec0f685618efbfcb981515dacc686d9c8e66d19

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/23/2024 3:50:27 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

Bkav FE
HW32.Packed
1.3.0.4959

File size:
67.2 KB (68,832 bytes)

Product version:
3.5.7585.2

Copyright:
Copyright (C) 2009

Original file name:
OesisDiagnose_V3

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\nevis networks\endpoint integrity agent\oesisdiagnose_v3.exe

Digital Signature
Signed by:
Nevis Networks

Authority:
VeriSign, Inc.

Valid from:
3/18/2013 5:30:00 AM

Valid to:
5/18/2014 5:29:59 AM

Subject:
CN=Nevis Networks, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Nevis Networks, L=Pune, S=India, C=IN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6D7498824B339AFCFDA282BE053323BD

File PE Metadata
Compilation timestamp:
8/24/2013 11:52:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
7.10

CTPH (ssdeep):
1536:IOCpgVV/kv5fOIxJD8g5Pbg/voeWaQdeYLPUa3WHrADp6THm6QjZ6KY5:IOas2v5fO688PbgmaQdeYjGAEb2jJY5

Entry address:
0x1000

Entry point:
B8, 54, 43, 44, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, BD, 80, 70, B5, 91, 89, 27, FB, 17, 2D, 96, 60, 69, 74, DC, 6E, BD, 59, 43, B7, 16, 47, 50, F1, 68, C7, 97, E0, F6, 1B, E9, C6, D3, C2, 25, 70, 8B, 38, B1, 0C, BC, DB, 0D, F5, A6, 52, 1B, 2C, 30, EC, E9, BA, D5, 1D, 46, 0A, 0B, 39, B6, 05, 8D, 10, 1E, 84, 34, DF, 8A, 27, EF, 65, 0E, ED, 32, BB, C8, 6E, 33, A3, 5A, 0C, BC, 8B, E1, 3C, 47, FE, 3F, 15, CD, 0B, 96, 4E, 68...
 
[+]

Entropy:
7.8989

Packer / compiler:
PECompact v2

Code size:
184 KB (188,416 bytes)

Scan oesisdiagnose_v3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.