» assistancedarty.exe
Overview
Analysis
File Details

assistancedarty.exe

Assistance Intégrale DARTY

Etablissement Darty et Fils sas

File name:

assistancedarty.exe

Publisher:

DARTY (signed by Etablissement Darty et Fils sas)

Product:

Assistance Intégrale DARTY

Version:

1.1.0.3

MD5:

1cd0eb0d924045a7f2c9d7846478f462

SHA-1:

5d4eeb6ef02af7619cfaa34a27ed0384a7260ca3

SHA-256:

0d1abb71bcc854c9735d641ca1487e74419f4917323ded811e87ae34c4a43668

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

1/14/2025 11:03:51 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Crypt.XPACK.Gen

7.11.30.172

File size:

2.4 MB (2,491,056 bytes)

Product version:

1.1

File type:

Executable application (Win32 EXE)

Language:

French (France)

Common path:

C:\Program Files\darty\assistancedarty.exe

Digital Signature

Signed by:

Etablissement Darty et Fils sas

Authority:

VeriSign, Inc.

Valid from:

9/6/2013 2:00:00 AM

Valid to:

9/16/2014 1:59:59 AM

Subject:

CN=Etablissement Darty et Fils sas, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=IT, O=Etablissement Darty et Fils sas, L=BONDY, S=France, C=FR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

46BF2B6D2F65884187D719E2ED003A0D

File PE Metadata

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

49152:2HRg7AePxbwCle2I9OKafErWdxAkjdVW7010qAHyZwAU9:sg7Ae5jeeRfErWdxAkjdVn1WRAe

Entry address:

0x2BFBD3

Entry point:

E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, 1E, EF, A2, 4F, 37, 65, 47, E8, AC, AA, AB, B6, 7A, 11, 1E, 32, 97, DE, 14, 2B, D1, 26, 5A, B0, 86, B0, 8C, E9, 57, 5B, BD, 99, E4, 3A, 19, 32, F3, 09, 2F, A3, CB, A3, 35, F7, 73, F2, 31, 45, 9D, 43, 54, 9E, E1, 70, FB, 39, 9D, 43, 54, 9E, E1, 70, FB, 39, E9, 3A, 6D, 00, 00, E9, 4E, 6D, 00, 00, E9, 49, 6D, 00, 00, E8, 6E, FB, FF, FF, CE, 01, 01, 00, 0C, 9A, 00, 00, 26, 8B, 1D, DB, 37, 00, 11, 63, 5B, 08, 54, 1B, 39, 90, F1, A2, 68, 94, F0, 77, AB, 43, C9, E2, 36... 
[+]

Packer / compiler:

MoleBox v2.0

Scan assistancedarty.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.