home

PhotoScape.EXE

PhotoScape

Product:
PhotoScape

Version:
1, 0, 0, 1293

MD5:
f6559b5e309d7a1ca754a64c2c55c3aa

SHA-1:
cd180225dbeef606361946b8d9917a910be6da23

SHA-256:
df7a0d2b8bb1f29f20b9b971387df5db2166b152ad1f25947971b7a87644b16c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 4:20:16 PM UTC  (today)

File size:
5.7 MB (5,943,296 bytes)

Product version:
1, 0, 0, 1293

Copyright:
Copyright (C) 2005

Original file name:
PhotoScape.EXE

File type:
Executable application (Win32 EXE)

Language:
Korean (Korea)

Common path:
C:\Program Files\photoscape\photoscape.exe

File PE Metadata
Compilation timestamp:
1/5/2009 3:21:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:6rQpoFKW6n4/ifnz6y9egYpez+mDHw2MaD5g:6tMn4/ihdQ2MaD5g

Entry address:
0x2795C0

Entry point:
E8, E1, 06, 00, 00, E9, 35, FD, FF, FF, CC, CC, CC, CC, CC, CC, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47, 8B, 54, 24, 10, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 14, 89, 54, 24, 10, 8B, 44, 24, 1C, 0B, C0, 7D, 14, 47, 8B, 54, 24, 18, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 1C, 89, 54, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 18, 8B, 44, 24, 14, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 10, F7, F1, 8B, D3, EB, 41, 8B, D8, 8B, 4C, 24, 18, 8B, 54, 24, 14, 8B, 44, 24, 10, D1, EB, D1, D9, D1, EA, D1, D8, 0B...
 
[+]

Entropy:
6.8052

Code size:
3.1 MB (3,297,280 bytes)

The file PhotoScape.EXE has been discovered within the following program.

PhotoScape  by Mooii Tech
PhotoScape is a graphics editing program, developed by MOOII Tech. The basic concept of PhotoScape is 'easy and fun', so that allows users to easily edit photographs taken from their digital cameras or even mobile phones.
www.photoscape.org
9% remove it
 
Powered by Should I Remove It?

The file PhotoScape.EXE has been seen being distributed by the following URL.

http://s10006.chomikuj.pl/File.aspx?e=DaKEYuXeOO3vi3NXoCUDYz77TS1ZizB1RClk0tHLTTT8yHN0R3wOQho2eGa9cKSZPKesI8pgZUdmC4LRMXLybka_daBnpXXEakjL3anFVrZL-r7HK0uoq5ELLGFA-S-O7BfR_phtgmnINSfYn7ibBA&pv=2

Scan PhotoScape.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.