home

eatpw.exe

Gleim Internet, Inc

This is installed with Gleim's FAA Test Prep 2009 WebDeploy.
Publisher:
Gleim Internet, Inc  (signed and verified)

MD5:
501a4f9270c33ada982c88364e23c1ac

SHA-1:
b9bcb0be6b9947794a70144f68b9837aa65f9271

SHA-256:
551474ec927aa947c59ea7df5b59d054ffd1ba965938c42ec7014fdbc96df066

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 8:50:38 AM UTC  (today)

File size:
108.9 KB (111,528 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\eatp2009\eatpw.exe

Digital Signature
Signed by:
Gleim Internet, Inc

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
7/8/2008 8:00:00 PM

Valid to:
8/27/2009 7:59:59 PM

Subject:
CN="Gleim Internet, Inc", OU=WWW, O="Gleim Internet, Inc", L=Gainesville, S=Florida, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
49292B9A94F07418B036623CAE4278D1

File PE Metadata
Compilation timestamp:
12/18/2008 12:38:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
1536:JAguFYPrK7ZyNsIbtdCOFUQsgJE0CmRRfwBwi4r9CnLI:JAguFipnFUQfJE0CV4r9Cnc

Entry address:
0x1129C

Entry point:
55, 8B, EC, B9, 04, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, B8, D0, 0A, 41, 00, E8, E0, 47, FF, FF, 33, C0, 55, 68, 15, 14, 41, 00, 64, FF, 30, 64, 89, 20, 8D, 55, EC, 33, C0, E8, B4, A1, FF, FF, 8B, 55, EC, B8, E8, 79, 41, 00, E8, A3, 30, FF, FF, 8B, 1D, E8, 79, 41, 00, 85, DB, 74, 05, 83, EB, 04, 8B, 1B, 68, E8, 79, 41, 00, 8B, D3, 83, EA, 09, B9, 03, 00, 00, 00, A1, E8, 79, 41, 00, E8, 9B, 34, FF, FF, E8, DA, F5, FF, FF, A3, EC, 79, 41, 00, E8, 7C, F6, FF, FF, 84, C0, 74, 27, B8, 2C, 14, 41...
 
[+]

Entropy:
6.1462

Developed / compiled with:
Microsoft Visual C++

Code size:
64.5 KB (66,048 bytes)

The file eatpw.exe has been discovered within the following program.

Gleim's FAA Test Prep 2009 WebDeploy  by Gleim
www.gleim.com
About 9% of users remove it
 
Powered by Should I Remove It?

Scan eatpw.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.