This file is malware. It is used by the Wanacry ransomware.


MD5: 7bf2b57f2a205768755c07f238fb32cc
SHA1: 45356a9dd616ed7161a3b9192e2f318d0ab5ad10
SHA256: b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25

=> VirusTotal


CharacterSet: Unicode
CodeSize: 81920
CompanyName: Microsoft Corporation
Directory: C \\Users\\user\\Desktop
EntryPoint: 0x13102
FileDescription: Load PerfMon Counters
FileFlags: (none)
FileFlagsMask: 0x003f
FileName: @WanaDecryptor@.exe
FileOS: Windows NT 32-bit
FilePath: C \\Users\\user\\Desktop
FilePermissions: rw-r--r--
FileSize: 240 kB
FileSubtype: 0
FileType: Win32 EXE
FileTypeExtension: exe
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
FileVersionNumber: 6.1.7600.16385
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
ImageVersion: 0.0
InitializedDataSize: 159744
InternalName: LODCTR.EXE
LanguageCode: English (U.S.)
LegalCopyright: © Microsoft Corporation. All rights reserved.
LinkerVersion: 6.0
MachineType: Intel 386 or later, and compatibles
MIMEType: application/octet-stream
ObjectFileType: Executable application
OriginalFileName: LODCTR.EXE
OSVersion: 4.0
PEType: PE32
ProductName: Microsoft® Windows® Operating System
ProductVersion: 6.1.7600.16385
ProductVersionNumber: 6.1.7600.16385
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 2009 07 14 01 19 35+02 00
UninitializedDataSize: 0