home

newsleecher.exe

Crystal Art Software

Publisher:
Crystal Art Software  (signed and verified)

MD5:
551d66e612c2bbde91274b58ff5703ec

SHA-1:
b3afe60d2e709a321fa45e9eac7fa43dfff6a92c

SHA-256:
0b85887d8fa8ff9212730548bee3720ba10c2b78c30ce8dc0528ee2d87144a9f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:27:32 AM UTC  (today)

File size:
6.4 MB (6,715,664 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\newsleecher\newsleecher.exe

Digital Signature
Signed by:
Crystal Art Software

Authority:
The USERTRUST Network

Valid from:
6/21/2010 7:00:00 PM

Valid to:
6/21/2013 6:59:59 PM

Subject:
CN=Crystal Art Software, O=Crystal Art Software, STREET=Nicolai Eigtveds Gade 36, L=CPH, S=DK, PostalCode=1402, C=DK

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00CE31A75E9A722E6B804736912D5F5908

File PE Metadata
Compilation timestamp:
4/16/2011 7:24:46 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:r7WmL+HncRvvGNwzfoMIgDI3YqOHt+8dKgR:r7T6HavvGuzo/gMoqOOgR

Entry address:
0x246DD3

Entry point:
52, BA, 64, 00, 00, 00, 85, D2, 74, 1D, B9, 00, 10, 00, 00, 85, C9, 74, 07, 01, C8, 01, D8, 49, EB, F5, 52, 54, 54, FF, 15, 26, A0, BD, 00, 5A, 4A, EB, DF, 5A, E9, 00, 12, CC, 00, 00, 00, 00, 00, 17, 73, 90, 3E, 00, 00, 00, 00, 00, 00, 08, 00, 01, 00, 00, 00, 50, 00, 00, 80, 02, 00, 00, 00, 28, 01, 00, 80, 03, 00, 00, 00, 10, 03, 00, 80, 06, 00, 00, 00, 50, 03, 00, 80, 0A, 00, 00, 00, 28, 04, 00, 80, 0C, 00, 00, 00, F0, 04, 00, 80, 0E, 00, 00, 00, C8, 05, 00, 80, 18, 00, 00, 00, E0, 05, 00, 80, 00, 00, 00...
 
[+]

Entropy:
7.9450  (probably packed)

Code size:
5 MB (5,276,672 bytes)

Scan newsleecher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.