» hideallip_runasadmin.exe
Overview
Analysis
File Details

hideallip_runasadmin.exe

HideAllIP Loader

Zhengzhou longlin technology Co.,Ltd.

File name:

Publisher:

www.hideallip.com (signed by Zhengzhou longlin technology Co.,Ltd.)

Product:

HideAllIP Loader

Description:

HideAllIP RunAsAdmin Mode

Version:

1.0.0.0

MD5:

c883daf33e8b19dac75426a66e3ce680

SHA-1:

7c6068a3c378afd3f37b022dd6966867ca691aba

SHA-256:

86fd9208775ac34bde5d3a8c92af050296c81b21ed15c4d5d888fd4a621a90d5

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/24/2024 8:44:36 PM UTC (today)

Scan engine

Detection

Engine version

F-Prot

W32/Patched.Y.gen

4.6.5.141

File size:

48.4 KB (49,520 bytes)

Product version:

1.0.0.0

www.hideallip.com

Trademarks:

www.hideallip.com

Original file name:

HideAllIP Loader

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\ابرامج\alqaqa\antivirus & security\hideallip portable لا يحتاج تنصيب\hideallip_runasadmin.exe

Digital Signature

Signed by:

Zhengzhou longlin technology Co.,Ltd.

Authority:

VeriSign, Inc.

Valid from:

11/23/2012 3:00:00 AM

Valid to:

12/24/2013 2:59:59 AM

Subject:

CN="Zhengzhou longlin technology Co.,Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Zhengzhou longlin technology Co.,Ltd.", L=Zhengzhou, S=Henan, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

205785AA3E2DB65D209BE5C4D9DB7CE9

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

Entry address:

0x7DBC

Entry point:

C3, C3, C3, C3, C3, C3, C3, C3, 89, 45, EC, 89, 45, E8, B8, 74, 7D, 40, 00, E8, 70, C6, FF, FF, 33, C0, 55, 68, 2E, 7E, 40, 00, 64, FF, 30, 64, 89, 20, 8D, 55, E8, A1, 10, 97, 40, 00, E8, E9, F8, FF, FF, 8B, 45, E8, 8D, 55, EC, E8, 56, D5, FF, FF, 8D, 45, EC, BA, 44, 7E, 40, 00, E8, 65, BA, FF, FF, 8B, 55, EC, 33, C9, 33, C0, E8, 61, FE, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, 68, 35, 7E, 40, 00, 8D, 45, E8, BA, 02, 00, 00, 00, E8, EB, B7, FF, FF, C3, E9, E9, B1, FF, FF, EB, EB, E8, CA, B6, FF, FF, 00, 00... 
[+]

Entropy:

6.3747

Code size:

28 KB (28,672 bytes)

Scan hideallip_runasadmin.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.