» encrypt_handler.plugin
Overview
Analysis
File Details

encrypt_handler.plugin

ContentWatch

File name:

Publisher:

ContentWatch (signed and verified)

MD5:

acaf91e85dd34d5410d4f22599279b63

SHA-1:

fb15c83d3b1640aca013e0a7f4e9819236dbf21c

SHA-256:

d6a356497b884a8ff63fb487f8aa0570d419bc599cfe80be6c6aabbcd0c6b32b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 12:57:59 PM UTC (today)

File size:

599.2 KB (613,544 bytes)

Common path:

C:\Program Files\contentwatch\bin\encrypt_handler.plugin

Digital Signature

Signed by:

ContentWatch

Authority:

GlobalSign nv-sa

Valid from:

8/1/2012 6:35:24 PM

Valid to:

8/2/2015 6:35:24 PM

Subject:

CN=ContentWatch, O=ContentWatch, L=Midvale, S=Utah, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11213A8155A0FD90E501E2EB88F998156CDE

File PE Metadata

Compilation timestamp:

5/5/2014 3:45:01 PM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

11.0

Entry address:

0x42D60

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, EF, 04, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 70, 10, 48, 89, 78, 18, 41, 56, 48, 83, EC, 30, 49, 8B, F0, 8B, FA, 4C, 8B, F1, BB, 01, 00, 00, 00, 89, 58, E8, 89, 15, A5, BD, 04, 00, 85, D2, 75, 12, 39, 15, E3, CC, 04, 00, 75, 0A, 33, DB, 89, 58, E8, E9, CB, 00, 00... 
[+]

Entropy:

6.1516

Code size:

317.5 KB (325,120 bytes)

Scan encrypt_handler.plugin - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.