» Plugin_FolderTools.exe
Overview
Analysis
File Details
Behaviors (1)

Plugin_FolderTools.exe

TweakVI

Totalidea Software GmbH

File name:

Publisher:

Totalidea Software (signed by Totalidea Software GmbH)

Product:

TweakVI

Description:

FolderTools Plugin for TweakVI

Version:

1.00.0004

MD5:

b4cd60a6740ba4ba9b90e1c35ca1a7ae

SHA-1:

7c8d8922e0590c819c009d70d27bedf26eea6346

SHA-256:

003ac096c87a8da3e0c1926d73d4962f16984da4025e2d0e8611d38ed9a3163a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 12:45:57 PM UTC (today)

File size:

657.7 KB (673,440 bytes)

Product version:

1.00.0004

2006

Trademarks:

TWEAK

Original file name:

Plugin_FolderTools.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\tweakvi\plugin_foldertools.exe

Digital Signature

Signed by:

Totalidea Software GmbH

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

8/11/2008 7:12:31 PM

Valid to:

8/11/2009 11:12:23 AM

Subject:

CN=Totalidea Software GmbH, OU=Development, O=Totalidea Software GmbH, L=Remscheid, S=NRW, C=DE

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

5378C2485FB9FC1B31912F3FF25A5475

File PE Metadata

Compilation timestamp:

11/26/2007 12:48:23 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

12288:qRBxP7QvNfZha0HSes6NH7hbpfYrc3+791e1IsKKNptCp8tHamD/tJ9yV:qPxjQvNf/a0HSNkbVtZEe1IsJzteUHaP

Entry address:

0x141001

Entry point:

60, E8, 03, 00, 00, 00, E9, EB, 04, 5D, 45, 55, C3, E8, 01, 00, 00, 00, EB, 5D, BB, ED, FF, FF, FF, 03, DD, 81, EB, 00, 10, 14, 00, 83, BD, 22, 04, 00, 00, 00, 89, 9D, 22, 04, 00, 00, 0F, 85, 65, 03, 00, 00, 8D, 85, 2E, 04, 00, 00, 50, FF, 95, 4D, 0F, 00, 00, 89, 85, 26, 04, 00, 00, 8B, F8, 8D, 5D, 5E, 53, 50, FF, 95, 49, 0F, 00, 00, 89, 85, 4D, 05, 00, 00, 8D, 5D, 6B, 53, 57, FF, 95, 49, 0F, 00, 00, 89, 85, 51, 05, 00, 00, 8D, 45, 77, FF, E0, 56, 69, 72, 74, 75, 61, 6C, 41, 6C, 6C, 6F, 63, 00, 56, 69, 72... 
[+]

Packer / compiler:

ASPack v2.12

Code size:

584 KB (598,016 bytes)

Automation Object

CLSID:

{83DB857F-F42E-4996-8F5A-2ED6389E21E8}

CLSID name:

Plugin_FolderTools.clsPluginInterface

Scan Plugin_FolderTools.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.