» nr_proto_328113704323408.tmp
Overview
Analysis
File Details

nr_proto_328113704323408.tmp

BIFIT

File name:

Publisher:

BIFIT (signed and verified)

MD5:

575aeafd191cc094560225ea178422cf

SHA-1:

98c11517da9d3d57adb8493472653e032841f020

SHA-256:

18a9691daddd0f2e5ba5b76d9f017a956df93d5593fc75d5b644112a38265e2c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 1:09:56 AM UTC (today)

File size:

247 KB (252,928 bytes)

Common path:

C:\users\{user}\appdata\local\temp\nr_proto_328113704323408.tmp

Digital Signature

Signed by:

BIFIT

Authority:

VeriSign, Inc.

Valid from:

6/1/2012 4:00:00 AM

Valid to:

6/23/2015 3:59:59 AM

Subject:

CN=BIFIT, OU=Development Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=BIFIT, L=Moscow, S=Moscow, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

48CA98B4326E8BAF7A830E1BBB2CDF10

File PE Metadata

Compilation timestamp:

9/24/2014 1:07:01 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:vxFZpVyK5ICHqb4RblyecRNPFVKQV1PTrKmsPPYcZfY7WR7SsHqqLnjnZ6em0ztD:vxFf5ICHL1lEVTXZsI7WR7B7jZZH

Entry address:

0x69EC7

Entry point:

9C, 8D, 64, 24, 04, 0F, 8F, C2, E6, FF, FF, 9C, C7, 04, 24, 9B, FF, BE, C8, E9, 2F, 9E, FF, FF, 66, 0F, B6, D9, 9C, 68, 86, 55, FF, 1F, 89, C3, 8D, 88, 9B, D8, C6, 05, B9, 36, 3D, 00, 00, 58, 98, B8, 00, 04, 00, 00, E8, 2A, 13, FD, FF, 9C, FE, C0, FF, 74, 24, 1C, 9C, 88, 04, 24, C0, C0, 05, FF, 74, 24, 04, C7, 04, 24, 2D, 48, 20, 07, 66, C7, 04, 24, E5, A3, E8, 0D, AB, FF, FF, 45, 85, 35, 2F, 4E, A9, CD, 68, 6F, 77, A2, E2, CA, 68, 9F, 07, 82, CA, 2D, 25, 32, C6, F7, 49, 76, DA, 80, AC, 3B, 1D, 9F, C4, D9... 
[+]

Code size:

53 KB (54,272 bytes)

Scan nr_proto_328113704323408.tmp - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.