home

2626

Refrains

Daniel Atallah

Publisher:
NCH Software  (signed by Daniel Atallah)

Product:
Refrains

Description:
Sastean8

Version:
1.00

MD5:
06ca8de17cd00d2188c386e6fca2b4b4

SHA-1:
23d12b27ebb36325c46ee3860f15571be66607fc

SHA-256:
40edca9bf602aaac0645363ed3a98b06506440600b5fe00b6a271b793a1a04e3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:27:02 PM UTC  (today)

File size:
594 KB (608,296 bytes)

Product version:
1.00

Original file name:
Guyers.exe

Common path:
C:\users\{user}\appdata\local\temp\2626

Digital Signature
Signed by:
Daniel Atallah

Authority:
StartCom Ltd.

Valid from:
9/11/2014 10:36:56 AM

Valid to:
9/11/2016 11:37:54 AM

Subject:
E=datallah@pidgin.im, CN=Daniel Atallah, L=Holland, S=Michigan, C=US

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
1015

File PE Metadata
Compilation timestamp:
12/8/2015 5:49:04 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:tCcZRLm8Qmo8RekeVc/1QG/+23OYDEl9RRYIhbZDej4lPBE3ncgrWE57KTC:tCcZRLDYRVc/x/+MOY4l9Pz/lcJKTC

Entry address:
0x1190

Entry point:
68, 04, 96, 45, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, B8, 80, F6, 48, 37, 8F, 95, 4E, B9, F6, CA, 23, 7D, 92, B4, 24, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4F, 79, 73, 74, 65, 72, 65, 64, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 04, A6, 96, 6F, BF, 85, 5B, AF, 4F, 8C, E7, EB, C5, D0, 1D, 0F, EB, 04, 96, 1E, 12, 1B, D5, A1, 4D, 92, B8, EA, 78, F3, 37, 4A, 17, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.4534

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
380 KB (389,120 bytes)

Scan 2626 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.