» _start.exe
Overview
Analysis
File Details

_start.exe

_geolib

Eversim

File name:

_start.exe

Publisher:

Eversim (signed and verified)

Product:

_geolib

Description:

_geolib

Version:

1, 0, 0, 1

MD5:

5197d763849e3923453fe47910209287

SHA-1:

f5370535df29ee4e45a95852349b3973f6f6982f

SHA-256:

f7a628c67b362b4f171a3d34ad388c2e5a096bd9aa164d52f87e3bc5cb7eab72

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/16/2024 5:43:29 AM UTC (today)

File size:

2 MB (2,045,480 bytes)

Product version:

0, 1, 2, 3

Original file name:

_geolib.rc

File type:

Executable application (Win32 EXE)

Language:

French (France)

Common path:

C:\Program Files\world of leaders\_start.exe

Digital Signature

Signed by:

Eversim

Authority:

COMODO CA Limited

Valid from:

2/6/2013 1:00:00 AM

Valid to:

2/7/2015 12:59:59 AM

Subject:

CN=Eversim, O=Eversim, STREET=13 Place des Libertés Publiques, STREET=Immeuble le Mandinet II - Bat B, L=Lognes, S=Seine et Marne, PostalCode=77185, C=FR

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00EB979B2F13B48AE0530AEDCAA0A5B5C2

File PE Metadata

Compilation timestamp:

7/24/2014 12:57:16 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

Entry address:

0xCBA4000

Entry point:

EB, 05, 94, 88, 7B, 4F, 6C, 50, EB, 02, 4B, 05, E8, 1B, 00, 00, 00, EB, 05, 3E, C6, 99, F8, 12, EB, 05, 49, 9A, AE, 94, 40, 33, C0, EB, 04, E1, 6F, 87, 2B, 71, 5C, EB, 01, 29, EB, 03, EE, C9, 3D, B8, 05, 48, FD, F6, EB, 01, 92, EB, 03, EC, D7, 5E, 05, FB, B7, 02, 09, EB, 03, 02, 25, FD, 75, 3B, EB, 02, 45, 3D, 64, FF, 30, EB, 01, 99, 64, 89, 20, EB, 04, D5, D3, E9, 46, EB, 01, 20, 8B, 10, EB, 02, 3B, 5F, 64, 8F, 00, EB, 03, 5B, 45, BE, 83, C4, 04, EB, 02, 99, C3, 58, EB, 05, C9, 6B, 01, 4C, 32, C3, EB, 05... 
[+]

Code size:

3.5 MB (3,676,160 bytes)

Scan _start.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.