» generalkb.exe
Overview
Analysis
File Details

generalkb.exe

GeneralKB

Astersoft Co.

File name:

generalkb.exe

Publisher:

Astersoft Co. (signed and verified)

Product:

GeneralKB

Description:

Knowledge Base software

Version:

2.8.459.0

MD5:

b844c1dc04d36df96b07e7ce58d7be26

SHA-1:

08666fa1b02c839d2e486c87bef887bb2f6a178d

SHA-256:

ba6d4f30f1163e1837f97ee020509d1d194f5308e7dd6aa1c8704b18e6a1cb3f

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

11/24/2024 7:45:04 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

Trojan.Agent-124036

0.98/17411

Trend Micro

PAK_Generic.009

10.465.22

File size:

6 MB (6,330,904 bytes)

Product version:

2.x

Trademarks:

GeneralKB

Original file name:

generalkb.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\generalkb\generalkb.exe

Digital Signature

Signed by:

Astersoft Co.

Authority:

GeoTrust Inc.

Valid from:

9/26/2010 4:21:54 AM

Valid to:

10/12/2011 6:18:49 AM

Subject:

E=support@astersoft.com, CN=Astersoft Co., OU=Email and phone validated only., OU=Phone Validation - 1(206) 203-6870, OU=See Public S/MIME CPS www.geotrust.com/resources/CPS., OU=CPS terms incorporated by reference liability limited.

Issuer:

CN=GeoTrust True Credentials CA 2, O=GeoTrust Inc., C=US

Serial number:

10F6E0

File PE Metadata

Compilation timestamp:

11/10/2010 6:15:26 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:wxgyqEJcsv2I24BNrCnesNpdYbmXlS3sKvTq2:wxtNcYrYeszDU8K+2

Entry address:

0xF78C33

Entry point:

60, 9C, 68, 6D, 97, FD, B5, C7, 44, 24, 24, EC, 7A, 12, EB, E8, 1D, 4F, 52, 00, 45, E0, 0B, 2D, 37, 94, A4, 3E, 3B, BD, 2E, 57, 7F, AC, CD, F4, 19, 46, 6A, 98, C8, EF, 10, 1B, 2A, 7C, 82, D5, C6, 8A, FB, D7, 48, 6B, 71, 46, 20, BD, 05, 1C, A1, AC, FE, 21, 24, E1, 76, 26, 30, F1, CB, F6, 11, 6A, E6, 62, E7, 8C, 97, 73, BE, 35, 15, 63, 25, CA, D0, EB, D5, 21, FA, A3, BE, B4, 06, 77, 1C, 28, 43, 28, 75, 9E, D0, AB, 7A, 58, C9, 6E, 8F, 2E, 2C, BD, FF, 70, 7E, 89, 14, 66, 1D, 4D, 18, 56, AB, 8B, 07, 78, 9F, A6... 
[+]

Entropy:

7.9752 (probably packed)

Code size:

10.3 MB (10,847,744 bytes)

Scan generalkb.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.