home

unelevate.exe

Speed-Bit LTD

Publisher:
Speed-Bit LTD  (signed and verified)

MD5:
525405dc2d859c7282bffdc27eb3fd39

SHA-1:
826b674e654a250e284db25d0b05f7481ae2f7c7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 2:39:45 AM UTC  (today)

File size:
266.5 KB (272,856 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\unelevate.exe

Digital Signature
Signed by:
Speed-Bit LTD

Authority:
Thawte, Inc.

Valid from:
8/19/2010 2:00:00 AM

Valid to:
9/4/2012 1:59:59 AM

Subject:
CN=Speed-Bit LTD, OU=SECURE APPLICATION DEVELOPMENT, O=Speed-Bit LTD, L=Haifa, S=North, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0C58AA8EA812E208E94134CC1B7556FD

File PE Metadata
Compilation timestamp:
11/26/2008 10:57:16 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

Entry address:
0x1B000

Entry point:
90, 68, 88, CC, F0, 00, 58, 90, BE, 1E, B0, 41, 00, 68, 98, 05, 00, 00, 5A, 90, 90, 31, 04, 32, 90, 90, 83, EA, 03, 4A, 90, 75, F4, 90, 60, B1, F1, 00, 88, CC, F0, 00, 88, CC, B0, 00, 7C, E4, F0, 00, 10, BE, F1, 00, 50, B5, F1, 00, 88, 7C, F2, 00, 89, CC, F0, 00, 88, CC, B1, 00, C2, FE, B1, 00, 16, F8, B1, 00, 84, EE, F1, 00, C0, FE, F1, 00, 14, F8, F1, 00, 88, 38, F0, 00, C0, FE, F1, 00, 14, F8, F1, 00, 88, CC, F0, 00, 88, CC, F0, 00, 88, CC, F0, 00, 88, CC, F0, 00, 80, CC, B1, 00, 88, CC, F0, 00, 88, CC...
 
[+]

Entropy:
7.6362

Code size:
60 KB (61,440 bytes)

Scan unelevate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.