» justflight_toh_demo.exe
Overview
Analysis
File Details

justflight_toh_demo.exe

Bootstrap

Mastertronic Group Ltd.

File name:

Publisher:

Mastertronic (signed by Mastertronic Group Ltd.)

Product:

Bootstrap

Description:

Web Bootstrapper

Version:

5.00.70

MD5:

aa73cb85132a24ece1c08d2c837a59a2

SHA-1:

0d5be7360cee781248a6865c1aa1725f11b8949b

SHA-256:

45aa5004f4683272728172801aeb4c5a05930976b6659504531cb49b3f8a9929

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 8:34:34 PM UTC (today)

File size:

2.3 MB (2,383,792 bytes)

Product version:

5.00.70

Original file name:

BOOTSTRAP.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\users\{user}\downloads\justflight_toh_demo.exe

Digital Signature

Signed by:

Mastertronic Group Ltd.

Authority:

VeriSign, Inc.

Valid from:

12/15/2010 6:00:00 PM

Valid to:

1/23/2012 5:59:59 PM

Subject:

CN=Mastertronic Group Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mastertronic Group Ltd., L=Huntingdon, S=Cambridgeshire, C=GB

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

02D3AA2001BE76D5EC921FCC54296391

File PE Metadata

Compilation timestamp:

1/17/2035 11:53:21 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:GOm+ZTVpa1Qb6OZ8zfA33DQ/df0l7LpCvkB0EMYkB06nQkB0VsVql:GOmWjaeGEgfA33DQ/s7YvkBkxnQkmT

Entry address:

0x1000

Entry point:

A1, 0F, B2, 45, 00, C1, E0, 02, A3, 13, B2, 45, 00, 57, 51, 33, C0, BF, 80, 7E, 4A, 00, B9, AC, BC, 4A, 00, 3B, CF, 76, 05, 2B, CF, FC, F3, AA, 59, 5F, 6A, 00, E8, 1F, 46, 04, 00, 59, 68, D8, B1, 45, 00, 6A, 00, E8, 2E, 8B, 05, 00, A3, 17, B2, 45, 00, 6A, 00, E9, AA, 16, 05, 00, E9, 24, 46, 04, 00, 33, C0, A0, 04, B2, 45, 00, C3, A1, 17, B2, 45, 00, C3, CC, B9, AC, 00, 00, 00, 0B, C9, 74, 39, 83, 3D, 0F, B2, 45, 00, 00, 73, 0A, B8, E2, 00, 00, 00, E8, E3, FF, FF, FF, 68, AC, 00, 00, 00, 6A, 40, E8, 76, 8B... 
[+]

Entropy:

5.6022

Code size:

360 KB (368,640 bytes)

Scan justflight_toh_demo.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.