home

EA34.exe

EA

Performance Trends Inc

Publisher:
Performance Trends  (signed by Performance Trends Inc)

Product:
EA

Version:
3.02

MD5:
b141ee3ec13afb72523f609f22d0e828

SHA-1:
4ab6027025421e42476442506b07e2907bdfd223

SHA-256:
a6b008fc80a2b4b4f2cd70d8b12a0ec44a87358c78a2811e713f66a81a667959

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/15/2024 5:32:28 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
23.00.65.15121

File size:
859.6 KB (880,224 bytes)

Product version:
3.02

Original file name:
EA34.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\performance trends\ea34.exe

Digital Signature
Signed by:
Performance Trends Inc

Authority:
Thawte, Inc.

Valid from:
1/7/2011 7:00:00 PM

Valid to:
1/7/2013 6:59:59 PM

Subject:
CN=Performance Trends Inc, O=Performance Trends Inc, L=Livonia, S=Michigan, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3B874D3266D8797236B498D223D5A0A1

File PE Metadata
Compilation timestamp:
1/18/2012 8:40:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:tgT0juqrl12UN0HMYnMGLSQKSHTTayGbVPZ:tAcuqrXqnRS0HMPZ

Entry address:
0x1DD1B8

Entry point:
D3, F0, 0F, A5, D8, D3, C8, EB, 07, D9, 1D, 7E, 5D, 9E, 9E, D7, 60, 0F, C0, E9, 3C, EF, F3, E8, 03, 00, 00, 00, 15, F4, 8E, 5A, E8, 08, 00, 00, 00, BF, 33, 59, B7, 06, 5D, 02, D5, 5D, 0F, AF, C9, 85, C6, 80, FD, 95, BA, 9A, 77, 01, 00, 0F, AC, D5, B5, C6, C7, 02, D0, C8, BB, 6B, 00, 00, 00, 88, E5, E8, 04, 00, 00, 00, BA, 2B, E8, 0A, 59, 0F, CE, 0F, C8, 45, 0F, BE, ED, 0F, B7, F0, FF, CE, 8B, F9, B8, 7A, F2, 1F, 91, C7, C1, BA, AD, 1F, EE, 0F, BC, C8, B9, D1, 45, 27, 3C, BE, AD, B0, E2, 36, 69, E9, CD, 28...
 
[+]

Entropy:
7.9898  (probably packed)

Code size:
1.7 MB (1,826,816 bytes)

Scan EA34.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.