» funcserver_wdc_x86.exe
Overview
Analysis
File Details

funcserver_wdc_x86.exe

Loqu8, Inc.

File name:

Publisher:

Loqu8, Inc. (signed and verified)

MD5:

79774e8a5da5bd2d62c2440dd5df12ec

SHA-1:

cb11ec8ebb283b802892614dbadee6c5a383117c

SHA-256:

a930f143b8936d559569b24362c4944143a1f0e72db08bcd974d7874ac92915f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 10:30:37 AM UTC (today)

File size:

108.6 KB (111,240 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\ProgramData\{ddc6040c-71ec-4139-8227-31ac57df9283}\offline\bd067e7c\e8f816af\funcserver_wdc_x86.exe

Digital Signature

Signed by:

Loqu8, Inc.

Authority:

StartCom Ltd.

Valid from:

7/23/2013 1:10:56 AM

Valid to:

7/24/2015 5:15:59 PM

Subject:

E=support@loqu8.com, CN="Loqu8, Inc.", O="Loqu8, Inc.", L=Mountain View, S=California, C=US, Description=6ut7PEnszfaiMMuG

Issuer:

CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:

0A7F

File PE Metadata

Compilation timestamp:

8/28/2014 1:35:20 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

1536:tYbsPztdFKStHHT90LRyz6Ac/262vju9DPEaVcN6doZFsWjcdQ67eQZhDLB4Btb:hYWHT90Lu61u62vjAI6doZqTnZhDLB4P

Entry address:

0x30B7

Entry point:

E8, 85, 4F, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 08, 85, F6, 74, 13, 8B, 55, 0C, 85, D2, 74, 0C, 8B, 4D, 10, 85, C9, 75, 19, 33, C0, 66, 89, 06, E8, 03, 12, 00, 00, 6A, 16, 5E, 89, 30, E8, BF, 13, 00, 00, 8B, C6, 5E, 5D, C3, 57, 8B, FE, 2B, F9, 0F, B7, 01, 66, 89, 04, 0F, 8D, 49, 02, 66, 85, C0, 74, 03, 4A, 75, EE, 33, C0, 5F, 85, D2, 75, DF, 66, 89, 06, E8, CE, 11, 00, 00, 6A, 22, EB, C9, 55, 8B, EC, 33, D2, 8B, C2, 39, 45, 0C, 76, 11, 8B, 4D, 08, 66, 39, 11, 74, 09, 40, 83, C1, 02, 3B, 45... 
[+]

Entropy:

6.4587

Code size:

64.5 KB (66,048 bytes)

Scan funcserver_wdc_x86.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.