Post
Topic
Board Bitcoin Discussion
Re: Suspicious e-mail calling for Bitcoin mining.
by
Injust
on 03/10/2015, 22:45:33 UTC
The file that is available for download has some interesting metadata.

File description: Jolanta6
Product name: Phocaceous8
Language: Bulgarian (Bulgaria)
Original filename: Qaplus.exe

EDIT: More metadata

TRANSLATION   0x0402 0x04b0
INTERNALNAME   Qaplus
FILEVERSION   1.00
COMPANYNAME   Astonsoft Ltd.
COMMENTS   Oxyuriasis
PRODUCTNAME   Phocaceous8
PRODUCTVERSION   1.00
FILEDESCRIPTION   Jolanta6
ORIGINALFILENAME   Qaplus.exe