home

matomete_c_g.exe

decode zip unicode version.

Jungle Co, Ltd.

Publisher:
pon software   (signed by Jungle Co, Ltd.)

Product:
decode zip unicode version.

Description:
Win32 Zip Self-Extractor

Version:
7.01

MD5:
7ffbcda4d262130f0209015a4e0639bc

SHA-1:
ccd9d7a9568b09114a0db146bf4ec7bd3c3b0182

SHA-256:
957398de12f13b5bff44e6c1fd53780e0ae250acd6a9319bf607d04b8787b1d3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 9:49:15 PM UTC  (today)

File size:
2.8 MB (2,885,088 bytes)

Product version:
7.01

Copyright:
Copyright(c) 2001-2015 by pon software

Original file name:
deczipW.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\matomete_c_g\matomete_c_g.exe

Digital Signature
Signed by:
Jungle Co, Ltd.

Authority:
GlobalSign nv-sa

Valid from:
1/13/2015 4:55:32 PM

Valid to:
2/27/2017 6:28:59 PM

Subject:
E=jung1e@junglejapan.com, CN="Jungle Co, Ltd.", OU=カスタマーサービス部, O="Jungle Co, Ltd.", L=千代田区神田錦町3-15 NTF 竹橋ビル8F, S=東京都, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D635A6EE6808F755A4173B41AE335AD4

File PE Metadata
Compilation timestamp:
6/26/2015 2:43:12 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:InmoiaPs/PJxDB06TxCkiPhAb3ApzzTvgeg/BHZjccj0E+AiFhAZ1zeo:d9cs/RxDO6MkipAb3Ax0egJHZwcj3+SG

Entry address:
0xC87B

Entry point:
E8, D3, 48, 00, 00, E9, 89, FE, FF, FF, 6A, 00, FF, 15, 7C, 41, 41, 00, C3, FF, 15, 78, 41, 41, 00, C2, 04, 00, 8B, FF, 55, 8B, EC, FF, 75, 08, FF, 35, 58, B0, 41, 00, FF, 15, 74, 41, 41, 00, FF, D0, 5D, C2, 04, 00, A1, 54, B0, 41, 00, C3, 8B, FF, 56, FF, 35, 58, B0, 41, 00, FF, 15, 74, 41, 41, 00, 8B, F0, 85, F6, 75, 1B, FF, 35, EC, E2, 41, 00, FF, 15, 6C, 41, 41, 00, 8B, F0, 56, FF, 35, 58, B0, 41, 00, FF, 15, 70, 41, 41, 00, 8B, C6, 5E, C3, 8B, FF, 55, 8B, EC, FF, 75, 0C, FF, 75, 08, FF, 35, F0, E2, 41...
 
[+]

Entropy:
7.9826  (probably packed)

Code size:
74.5 KB (76,288 bytes)

Scan matomete_c_g.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.