» irmtool_4.3.1_2010-12-31_setup.exe
Overview
Analysis
File Details

irmtool_4.3.1_2010-12-31_setup.exe

Huawei Technologies Co.,Ltd.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer.

File name:

Publisher:

Huawei Technologies Co.,Ltd. (signed and verified)

MD5:

b4b60d0b39f0df200d968ff05d06eb4f

SHA-1:

e75c97e87fcbb6c3484d1aae4eee0a1f1bca7766

SHA-256:

945048d929448ffa14f583507dcd2c642b21f29009ad07803685035d8c318697

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/29/2025 7:46:43 PM UTC (today)

File size:

3.7 MB (3,854,720 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Digital Signature

Signed by:

Huawei Technologies Co.,Ltd.

Authority:

VeriSign, Inc.

Valid from:

6/28/2010 4:30:00 AM

Valid to:

6/29/2011 4:29:59 AM

Subject:

CN="Huawei Technologies Co.,Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Huawei Technologies Co.,Ltd.", L=Shenzhen, S=Guangdong, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

481C6AF64CDFE436019BB54EBBEB48E4

File PE Metadata

Compilation timestamp:

11/27/2006 9:11:21 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

98304:SYSwN9SLfsWImMqDzSLSrg1/kQYUJTAsh4P:nfSL9tDzSLSm8QbTA24

Entry address:

0x36F2

Entry point:

81, EC, 7C, 01, 00, 00, 53, 55, 56, 33, F6, 57, 89, 74, 24, 18, BB, 10, A7, 40, 00, C6, 44, 24, 10, 20, FF, 15, 30, 80, 40, 00, 56, FF, 15, 7C, 82, 40, 00, A3, D0, 6B, 42, 00, 56, 8D, 44, 24, 30, 68, 60, 01, 00, 00, 50, 56, 68, B8, 14, 42, 00, FF, 15, 58, 81, 40, 00, 68, 34, A8, 40, 00, 68, 20, 63, 42, 00, E8, 72, 29, 00, 00, BD, 00, D4, 42, 00, 55, 68, 00, 04, 00, 00, FF, 15, B8, 80, 40, 00, E8, 64, FF, FF, FF, 85, C0, 75, 24, 68, FB, 03, 00, 00, 55, FF, 15, B4, 80, 40, 00, 68, 2C, A8, 40, 00, 55, E8, 5D... 
[+]

Entropy:

7.9973

Packer / compiler:

Nullsoft install system v2.x

Code size:

24.5 KB (25,088 bytes)

Scan irmtool_4.3.1_2010-12-31_setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.