» 1346852256-setup_colorexpress_1.2.0.2200_free.exe
Overview
Analysis
File Details

1346852256-setup_colorexpress_1.2.0.2200_free.exe

LD DIDACTIC GmbH

File name:

Publisher:

LD DIDACTIC GmbH (signed and verified)

MD5:

ef6a2bfbcf269fe76edfcde30fab3883

SHA-1:

cc12e3f3fe5688d80c3e9ba850aaca83783e2416

SHA-256:

c5cd1a661f91e4245d25338cb72a18a8a4174a9f05afa9b75ccfeed0c272f044

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/12/2025 8:28:13 AM UTC (today)

File size:

15.6 MB (16,335,872 bytes)

File type:

Executable application (Win16 EXE)

Common path:

C:\users\{user}\downloads\1346852256-setup_colorexpress_1.2.0.2200_free.exe

Digital Signature

Signed by:

LD DIDACTIC GmbH

Authority:

TC TrustCenter GmbH

Valid from:

8/24/2010 12:34:52 PM

Valid to:

8/24/2013 12:34:52 PM

Subject:

CN=LD DIDACTIC GmbH, OU=TC Publisher ID for Authenticode, O=LD DIDACTIC GmbH, L=Huerth, S=NRW, C=DE

Issuer:

CN=TC TrustCenter Class 2 L1 CA XII, OU=TC TrustCenter Class 2 L1 CA, O=TC TrustCenter GmbH, C=DE

Serial number:

00E1CD00010002DC1217C15123BD73

File PE Metadata

OS version:

841.0

OS bitness:

Win16

CTPH (ssdeep):

393216:N+NRVBLg0bkJ4C4ejYEGUUMBxeUH8bCtUEVN9Q:qbLgXOC4S/bDeUcGtUEC

Entry address:

0x276

Entry point:

D0, CF, 11, E0, A1, B1, 1A, E1, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3E, 00, 03, 00, FE, FF, 09, 00, 06, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FA, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 10, 00, 00, 38, 00, 00, 00, 02, 00, 00, 00, AC, 03, 00, 00, 02, 00, 00, 00, 00, 00, 00, 00, 7B, 00, 00, 00, 7C, 00, 00, 00, 7D, 00, 00, 00, 7E, 00, 00, 00, 76, 02, 00, 00, 03, 00, 00, 00, 45, 03, 00, 00, 46, 03, 00, 00, 47, 03, 00, 00, 48, 03, 00, 00, 49, 03, 00, 00, 4A, 03, 00, 00... 
[+]

Entropy:

7.9894 (probably packed)

Code size:

124 Bytes (124 bytes)

Scan 1346852256-setup_colorexpress_1.2.0.2200_free.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.