home

DeactivateLicenseKey.exe

TODO:

Readygo Soft

Publisher:
TODO: <Company name>  (signed by Readygo Soft)

Product:
TODO: <Product name>

Description:
DeactivateLicenseKey

Version:
1.0.0.1

MD5:
161b4379c476bfb01d1b39ecd7b08068

SHA-1:
8452c480ea5860881cdd06da52bb81eb3b4180fb

SHA-256:
15a424946b428250d83ed4bc8bf76233c594e305c49b7f8f516dee404d0c4bc3

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 10:31:49 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM16.0.Malware.Gen
1.0.0.1120

File size:
3.5 MB (3,622,208 bytes)

Product version:
1.0.0.1

Copyright:
TODO: (c) <Company name>. All rights reserved.

Original file name:
DeactivateLicenseKey.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\deactivatelicensekey.exe

Digital Signature
Signed by:
Readygo Soft

Authority:
thawte, Inc.

Valid from:
3/16/2015 2:00:00 AM

Valid to:
3/16/2016 1:59:59 AM

Subject:
CN=Readygo Soft, OU=IT Team, O=Readygo Soft, L=Gwangjin-gu, S=SEOUL, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
777476FE1EC1D6551C3E01D6B3E7C298

File PE Metadata
Compilation timestamp:
7/1/2015 3:18:25 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:Thl/Buk8ZIo9U5nBP5hV6XXy3uKNprep/DNt+VtdvBpj85CvRWprZNfiMAZaEqrh:TZuXZLKnBPwAdxRvBp30prPi323V/

Entry address:
0x4D8B61

Entry point:
9C, 66, C7, 04, 24, 44, 26, C6, 04, 24, DA, C7, 04, 24, 80, FF, 5C, 2D, E8, A6, 54, 00, 00, 0E, 60, 5E, 9D, A0, 0A, A0, EA, 6F, 1F, E3, 12, 70, C0, D7, 64, 60, 4E, EF, 9E, 74, DA, F3, C2, 4B, BB, 8C, 3A, 1E, 2B, F0, 41, 03, 76, 32, 1C, 8F, 5B, E5, 57, 25, 74, F1, C1, 3A, 0C, 78, 54, DF, 59, 4E, 65, 71, 51, 1B, 80, 2C, BF, E1, 97, 1B, 2B, 88, 35, D2, 70, C0, A5, 0A, 9A, 92, 1B, B5, 07, B5, B4, E8, 61, 2E, 76, A1, 7F, C4, 98, 88, 1F, 81, AC, 5B, AB, 48, 77, 91, 8F, 3F, F3, D5, A6, 3E, 8C, C3, DD, 33, 4C, 3E...
 
[+]

Entropy:
7.9187  (probably packed)

Code size:
1.1 MB (1,149,952 bytes)

Scan DeactivateLicenseKey.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.