home

dema165.tmp

EslWireACD

Turtle Entertainment GmbH

Publisher:
<Turtle Entertainment>  (signed by Turtle Entertainment GmbH)

Product:
EslWireACD

Version:
1.0.0.5691

MD5:
21279094a301a8a88bc28b13bd637fb3

SHA-1:
befc3aebca96b20ce7c269228e57f2aaff9f5020

SHA-256:
81cafcc3b8c7a0f043481fbc96a899baf8b90d986bf85eb5a9321c84fde1cade

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 2:38:16 AM UTC  (today)

File size:
116.1 KB (118,896 bytes)

Product version:
1.0

Copyright:
Copyright © 2010

Original file name:
EslWireACD

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\dema165.tmp

Digital Signature
Signed by:
Turtle Entertainment GmbH

Authority:
GlobalSign nv-sa

Valid from:
9/29/2011 5:19:37 PM

Valid to:
12/27/2014 11:17:59 AM

Subject:
CN=Turtle Entertainment GmbH, OU=Desktop Software Development, O=Turtle Entertainment GmbH, L=Cologne, S=NRW, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211D81E9C09273DF1A6E9A05931416F400

File PE Metadata
Compilation timestamp:
11/19/2014 1:07:51 PM

OS version:
6.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
11.0

CTPH (ssdeep):
1536:bN3F5bJor79L20rKa5igzFAO7iqKGf1zNHo3MOm2uuW9bCv4aCihfY6cXlyKTi:R3jbeX4uFAFYzVq9lW9DavY64

Entry address:
0x7D043

Entry point:
E9, C7, B1, FF, FF, 00, 00, 5F, 76, 73, 6E, 77, 70, 72, 69, 6E, 74, 66, 00, E9, 81, A8, FF, FF, E9, B1, 17, 00, 00, 0F, 84, 6E, AF, FF, FF, F8, 48, 0F, BA, E0, 15, 48, 81, C2, 28, 01, 00, 00, E9, A9, B2, FF, FF, 38, F8, F5, 2C, 30, F8, 66, 0F, A3, FE, F7, C2, A1, 67, 44, 84, F5, 3C, 09, E9, 34, 17, 00, 00, 20, F7, 48, 3D, D9, 7E, F0, 08, 31, C0, 0F, 90, C7, 66, 0F, B6, DA, 0F, 98, C6, 66, 0F, B6, D3, 5A, 66, 0F, B6, D9, 0F, 97, C7, 66, 87, F3, 5B, E9, 49, F6, FF, FF, 23, 1B, AB, B1, DF, 75, 5C, 5D, 05, BA...
 
[+]

Entropy:
7.4505

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
28.5 KB (29,184 bytes)

Scan dema165.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.