» xivgui-4.8.0.2-build2-win64.exe
Overview
Analysis
File Details

xivgui-4.8.0.2-build2-win64.exe

InstallAnywhere

IBM Israel Science & Technology Ltd.

This is a self-extracting archive and installer.

File name:

Publisher:

Flexera Software (signed by IBM Israel Science & Technology Ltd.)

Product:

InstallAnywhere

Description:

InstallAnywhere Self-Extractor

Version:

16, 5, 0, 0

MD5:

7c4b78a46cb59a4cce5620e2a1644fa8

SHA-1:

028e8bc4fb69b2ddc8ad4f1ef5089c66af49aee7

SHA-256:

411b34e046061bf8d8c4bf4f5e991ebe8c24a15b58ab777bcd7721304d4662de

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 6:58:41 AM UTC (today)

File size:

248.5 MB (260,522,184 bytes)

Product version:

16, 5, 0, 0

Original file name:

iase.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\xivgui-4.8.0.2-build2-win64.exe

Digital Signature

Signed by:

IBM Israel Science & Technology Ltd.

Authority:

VeriSign, Inc.

Valid from:

12/30/2013 12:00:00 AM

Valid to:

12/29/2016 11:59:59 PM

Subject:

CN=IBM Israel Science & Technology Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IBM Israel Science & Technology Ltd., L=Tel-Aviv, S=ISRAEL, C=IL

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4461DDF003F571EAD9C823180BB02AAE

File PE Metadata

Compilation timestamp:

11/27/2014 6:23:30 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

6291456:q1GRhfqTCq+RdvWfy/mg7AEbkNNH/9k4/wEbwhcO:q1Hw9fAEn4/nScO

Entry address:

0x2FF08

Entry point:

48, 83, EC, 28, E8, 4B, DC, 00, 00, 48, 83, C4, 28, E9, 36, FE, FF, FF, CC, CC, 48, 83, EC, 28, FF, 15, 1A, C1, 01, 00, 85, C0, 75, 08, FF, 15, 28, C1, 01, 00, EB, 02, 33, C0, 85, C0, 74, 0C, 8B, C8, E8, 35, 00, 00, 00, 83, C8, FF, EB, 02, 33, C0, 48, 83, C4, 28, C3, CC, E9, CB, FF, FF, FF, CC, CC, CC, 48, 83, EC, 28, E8, 57, 4E, 00, 00, 48, 85, C0, 75, 09, 48, 8D, 05, D3, 39, 03, 00, EB, 04, 48, 83, C0, 14, 48, 83, C4, 28, C3, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 8B, F9, E8, 2F, 4E, 00, 00, 48, 85, C0... 
[+]

Entropy:

7.9994 (probably packed)

Code size:

296.5 KB (303,616 bytes)

Scan xivgui-4.8.0.2-build2-win64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.