home

tidystartmenu.exe

OrdinarySoft

Publisher:
OrdinarySoft  (signed and verified)

MD5:
e07c1e7b41330a8d8c63c6aea8dcc1c3

SHA-1:
7e8688330ea5a24f23835e7099b033e4aa9c36ff

SHA-256:
659c56696f463cd587ebbcffd59015a58332932e4ca1cbf62b22f849e8ff1247

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:36:25 AM UTC  (today)

File size:
4.5 MB (4,760,984 bytes)

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\start menu xp\tidystartmenu.exe

Digital Signature
Signed by:
OrdinarySoft

Authority:
VeriSign, Inc.

Valid from:
12/27/2010 6:00:00 PM

Valid to:
12/30/2011 5:59:59 PM

Subject:
CN=OrdinarySoft, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=OrdinarySoft, L=Vishneve, S=Kievskaya, C=UA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
16690BA8ACB946D3B4DCCDB54D0F3540

File PE Metadata
Compilation timestamp:
7/7/2011 9:40:50 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:fXuuOK4bYsRWfjm32AkTp8SBViIaAN7t1PXee6S1kYrc2MJqFYVgij+ZgtBY5AWr:fuu7PjLTySBh/Nh1PT6S1lVMHaQ+ZIYX

Entry address:
0xB3FC19

Entry point:
E9, A0, 2D, 00, 00, E9, 26, 57, 00, 00, E9, BE, 9A, 00, 00, 0F, 82, 39, C0, FF, FF, 66, 39, DE, F6, C1, 27, 38, F9, 80, 7F, FF, 00, E9, 5C, F5, 00, 00, D5, 66, 2D, 0D, ED, 9D, E1, 4C, D6, FA, D8, 92, B2, 62, 14, 54, 54, 78, 1A, 12, E6, 58, EA, CC, 2C, FE, AA, F8, E2, A1, 14, 04, F6, 11, B2, F2, BA, D0, CD, 92, 52, 8F, 6D, AB, A5, F2, 21, 61, D0, 9D, 9C, 21, 7F, 69, E6, B4, 41, 2D, 1B, F8, 7D, 55, 03, 0B, 85, 79, C1, EF, CD, D7, 26, 14, 99, CE, 30, 47, 9D, 77, 81, E5, 99, B1, 0A, 7C, C3, EB, 16, FA, 39, 84...
 
[+]

Entropy:
7.8797

Packer / compiler:
Xtreme-Protector v1.05

Code size:
3.2 MB (3,318,272 bytes)

Scan tidystartmenu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.