» jv16 2014.exe
Overview
Analysis
File Details

jv16 2014.exe

jv16 PowerTools

Macecraft Software

File name:

jv16 2014.exe

Publisher:

Macecraft Software (signed and verified)

Product:

jv16 PowerTools

Description:

jv16 PowerTools 2014

Version:

3.2.0.1354

MD5:

9df8706a974d8cf8c75167b177997d27

SHA-1:

c134cb6212052a1fdc9ec4b7ae7a887ac7d56124

SHA-256:

4dafbc5343533eb886c587d82a4fe3403c93dac008d4497fc8532e6a3a95625c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 11:41:13 AM UTC (today)

File size:

12.5 MB (13,083,888 bytes)

Product version:

2014

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\microsoft\windows\start menu x\programs\registry\ jv16 2014.exe

Digital Signature

Signed by:

Macecraft Software

Authority:

COMODO CA Limited

Valid from:

4/9/2013 8:00:00 PM

Valid to:

4/10/2015 7:59:59 PM

Subject:

CN=Macecraft Software, O=Macecraft Software, STREET=Aninkaistenkatu 5 B 21, L=Turku, S=Satakunta, PostalCode=20100, C=FI

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00F77AD3D6C13C25E9E5C7D518D05C531D

File PE Metadata

Compilation timestamp:

11/8/2013 7:56:45 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:saMZfJtJK1Ycz6gIgA1wlMfDOHr/qbb7cbSmNk5dInqk00m:XMZRtJK1dwgA1wxrSb76Gk00m

Entry address:

0x1D61AF7

Entry point:

9C, E8, EF, D7, 9E, FF, 00, 00, 56, 61, 72, 69, 61, 6E, 74, 43, 68, 61, 6E, 67, 65, 54, 79, 70, 65, 00, E9, 2B, 52, BA, FF, 23, 56, 93, 5B, BD, 06, 59, 28, D8, 81, BA, F7, 0B, E5, 11, 17, 13, D1, 2D, DF, 2D, AD, 57, E7, BF, 85, 79, AF, 6D, 90, 5A, F6, 0A, C0, 33, 5C, 3F, 36, D3, 71, 7E, 5C, B6, A9, C0, B7, 6C, ED, 86, 41, 80, 72, E2, 8B, 4F, C3, E5, 1A, CA, 73, 4E, 4C, F1, 39, 9F, DD, FA, 59, 45, 01, 01, 1F, E6, D3, 0A, F0, 2D, 4F, D0, 8C, 0A, 18, A1, 94, 7F, B5, 80, 59, 85, E0, E3, CD, F0, 7D, 61, A5, B1... 
[+]

Entropy:

7.8320 (probably packed)

Code size:

5 MB (5,198,848 bytes)

Scan jv16 2014.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.