home

solartool.exe

MD5:
23608e2c691990d3af2732b7cd710ddd

SHA-1:
69ca395304673f586db47daaa98877a863ce136c

SHA-256:
735a15ffbfe6517c1e3d1f9474e38a7e70f63b3dd39ff8a84319980b1fe40de3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 9:10:44 PM UTC  (today)

File size:
1.7 MB (1,767,424 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\solartool.exe

File PE Metadata
Compilation timestamp:
12/7/2003 2:33:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:jdp1oKEVT0UE6BW4ArHRZhCJPg3M72fzefA:+Kw5jYRXCJgM+zefA

Entry address:
0x1528

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 98, 20, 51, 00, A1, 8B, 20, 51, 00, C1, E0, 02, A3, 8F, 20, 51, 00, 52, 6A, 00, E8, EB, FD, 10, 00, 8B, D0, E8, 16, C9, 0E, 00, 5A, E8, 74, C8, 0E, 00, E8, 4B, C9, 0E, 00, 6A, 00, E8, 28, E0, 0E, 00, 59, 68, 34, 20, 51, 00, 6A, 00, E8, C5, FD, 10, 00, A3, 93, 20, 51, 00, 6A, 00, E9, 67, 7F, 0F, 00, E9, 56, E0, 0E, 00, 33, C0, A0, 7D, 20, 51, 00, C3, A1, 93, 20, 51, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, B8, 00, 00, 00, 0B, C9...
 
[+]

Entropy:
6.4238

Code size:
1.1 MB (1,118,208 bytes)

The file solartool.exe has been seen being distributed by the following 2 URLs.

http://miscursos.itesm.mx/bbcswebdav/.../xid-27765836_1

http://miscursos.itesm.mx/bbcswebdav/.../xid-27765836_1

Scan solartool.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.