» edif.ax
Overview
Analysis
File Details

edif.ax

Elecard Deinterlacer

Elecard

File name:

edif.ax

Publisher:

Elecard Ltd (signed by Elecard)

Product:

Elecard Deinterlacer

Description:

Elecard Deinterlacer DirectShow Filter

Version:

3.1.035153.120717

MD5:

4ff0cf9c48f18f5499db1b6ee13dcdbc

SHA-1:

e4c996da28f23a7d1dac3f52a8f7ec1cce3bf25c

SHA-256:

2c5d78e960a5afd7f7212455e5b1de75eab6aa4b0c1d277938e5dd5bf0497888

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 10:39:49 AM UTC (today)

File size:

802.6 KB (821,816 bytes)

Product version:

3.1.035153.120717

Original file name:

edif.ax

Language:

English (United States)

Common path:

C:\Program Files\common files\digital media applications\edif.ax

Digital Signature

Signed by:

Elecard

Authority:

COMODO CA Limited

Valid from:

12/10/2013 7:00:00 PM

Valid to:

12/11/2014 6:59:59 PM

Subject:

CN=Elecard, O=Elecard, STREET=3 Razvitiya ave, L=Tomsk, S=Tomsk region, PostalCode=634055, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00E280B897980BD2ABE6CD292092EF3DD3

File PE Metadata

Compilation timestamp:

7/17/2012 3:26:10 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:J8a7MM/Gt12RIzifsGKlEejI7O661KnOsrvUBknWdAKBbqr:J8aet12RIzifUl87O661KxWknWdAobqr

Entry address:

0x7F328

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 13, 00, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 10, A1, B0, C6, 0B, 10, 83, 65, F8, 00, 83, 65, FC, 00, 53, 57, BF, 4E, E6, 40, BB, BB, 00, 00, FF, FF, 3B, C7, 74, 0D, 85, C3, 74, 09, F7, D0, A3, B4, C6, 0B, 10, EB, 60, 56, 8D, 45, F8, 50, FF, 15, F0, 81, 0A, 10, 8B, 75, FC, 33, 75, F8, FF, 15, B4, 81, 0A, 10, 33, F0, FF, 15, C0, 81, 0A, 10, 33, F0, FF, 15, E4, 80, 0A, 10, 33, F0, 8D, 45... 
[+]

Entropy:

6.7296

Code size:

664.5 KB (680,448 bytes)

Scan edif.ax - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.