» webgalery.exe
Overview
Analysis
File Details

webgalery.exe

HTML Webgalery Creator

SoftOrbits

File name:

webgalery.exe

Publisher:

SoftOrbits (signed and verified)

Product:

HTML Webgalery Creator

Version:

1, 0, 0, 1

MD5:

03679f106bb5b6ca8355e1e6cb80468c

SHA-1:

73fbec2a402c5d5a60261de1170a04a4252a1c6d

SHA-256:

6ac711adaab849e2e30acb0bd3befa76b66e368f03fdcbbe0f06c30b1cb5bb49

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

12/26/2024 12:47:47 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/17411

File size:

1 MB (1,069,368 bytes)

Product version:

1, 0, 0, 1

Original file name:

webgalery.exe

File type:

Executable application (Win32 EXE)

Language:

Russian (Russia)

Common path:

C:\Program Files\softorbits digital photo suite\html web gallery generator\webgalery.exe

Digital Signature

Signed by:

SoftOrbits

Authority:

VeriSign, Inc.

Valid from:

1/14/2010 10:00:00 PM

Valid to:

1/15/2011 9:59:59 PM

Subject:

CN=SoftOrbits, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SoftOrbits, L=Smolensk, S=Smolenskaya, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

06344595FE375E5F9CE7E11C6A870479

File PE Metadata

Compilation timestamp:

10/30/2009 3:45:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

24576:PBDG7xka7XQzoKR3J3+ShBUrwVX7mWG4lKxAF82qBbYE4PZEhwY:PhGp80KD7UrQ/lEAu2qVvkEhwY

Entry address:

0x1000

Entry point:

68, 01, E0, 64, 00, E8, 01, 00, 00, 00, C3, C3, 6D, B7, EE, 0E, 6E, C4, 03, C0, 3D, 51, 63, 1D, FD, 9C, E5, 47, 1C, 9F, E7, 6D, 76, FB, 96, FF, 92, 73, BB, D9, 90, D6, 10, 65, 54, 57, 80, A8, 37, FB, FD, C4, E6, 68, B1, 22, 14, F5, 2E, 38, 0F, 90, 6B, 41, A5, 15, 9D, D9, CB, CF, 3E, 32, D4, 84, 58, 52, 6B, DB, 64, 4C, 70, C3, 05, 42, 30, 4C, EB, 17, 9A, 9D, C3, 36, 5A, F4, 80, D1, 87, 5F, E9, B7, 63, 8F, A9, 2B, 7E, BD, DB, A6, 5D, 41, 07, CD, 29, D8, 93, 8D, 90, 1E, BA, 84, 3B, AA, DE, 31, 89, 16, 46, 6C... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.5 MB (1,585,152 bytes)

Scan webgalery.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.