home

trimcheck-0.7-win64.exe

Open Source Developer, Vladimir Panteleev

Publisher:
Open Source Developer, Vladimir Panteleev  (signed and verified)

MD5:
61f2288fab89e2c08b452d0d7ddaf8aa

SHA-1:
bf69f4b6e7f58060cab33b6661eb81538097b2e1

SHA-256:
e08038bebeda7cdfed90144fed8285dc84e40b6d53935fe069327a74b2278beb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 11:26:17 PM UTC  (a few moments ago)

File size:
1.3 MB (1,377,088 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\trimcheck-0.7-win64.exe

Digital Signature
Signed by:
Open Source Developer, Vladimir Panteleev

Authority:
Unizeto Technologies S.A.

Valid from:
10/7/2015 7:48:04 AM

Valid to:
10/6/2016 7:48:04 AM

Subject:
E=code@thecybershadow.net, CN="Open Source Developer, Vladimir Panteleev", O=Open Source Developer, C=MD

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
0EB258D5EC0F57C68FEB9F7E1375CA25

File PE Metadata
Compilation timestamp:
10/7/2015 9:52:37 AM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
12288:IbBfrAJMccW5fbgLvGuczJAluF3DojodBhgiqOpQXI92u:Ib1rAJrh5bS+fzJAluJDJWOWXI92u

Entry address:
0x76AC4

Entry point:
48, 83, EC, 28, E8, 43, 5A, 00, 00, 48, 83, C4, 28, E9, 42, FE, FF, FF, CC, CC, 44, 0F, B7, 02, 0F, B7, 01, 41, 2B, C0, 75, 1A, 48, 2B, CA, 66, 45, 85, C0, 74, 11, 48, 83, C2, 02, 44, 0F, B7, 02, 0F, B7, 04, 11, 41, 2B, C0, 74, E9, 85, C0, 79, 04, 83, C8, FF, C3, B9, 01, 00, 00, 00, 85, C0, 0F, 4F, C1, C3, CC, CC, CC, 48, 8B, C4, 48, 89, 50, 10, 48, 89, 48, 08, 4C, 89, 40, 18, 4C, 89, 48, 20, 53, 56, 57, 41, 56, 48, 83, EC, 28, 48, 8B, F1, 33, FF, 33, C0, 48, 85, C9, 0F, 95, C0, 85, C0, 75, 18, E8, B6, 15...
 
[+]

Entropy:
5.6635

Code size:
544 KB (557,056 bytes)

The file trimcheck-0.7-win64.exe has been seen being distributed by the following URL.

http://files.thecybershadow.net/.../trimcheck-0.7-win64.exe

Scan trimcheck-0.7-win64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.