home

Z-ParSwitch.exe

Z-ParSwitch

Andreas Baumann

Publisher:
IMU - BerliNet  (signed by Andreas Baumann)

Product:
Z-ParSwitch

Description:
Schalten mit dem ParallelPort

Version:
3.00.0001

MD5:
aef55564e530c4b3e85ce01a1fc9f264

SHA-1:
7229e975849f77d2e4369cae67bbdd91e4eed060

SHA-256:
8ddd71c83aa4c19ed625b86f3074694c48d01712e2029dbf92c8f08e12f19983

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 11:46:51 AM UTC  (today)

File size:
238.6 KB (244,288 bytes)

Product version:
3.00.0001

Copyright:
Copyright © 2003 - 2011 A.Baumann

Original file name:
Z-ParSwitch.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\z-parswitch\z-parswitch.exe

Digital Signature
Signed by:
Andreas Baumann

Authority:
Thawte, Inc.

Valid from:
1/13/2011 2:00:00 AM

Valid to:
2/20/2012 1:59:59 AM

Subject:
CN=Andreas Baumann, OU=SECURE APPLICATION DEVELOPMENT, O=Andreas Baumann, L=Berlin, S=Berlin, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
73A9EBF9350B543DA92AFEFFD03051E5

File PE Metadata
Compilation timestamp:
2/15/2011 4:41:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:DSe31dSXz58rGU/ANASaqWjhIwVzUxOe+tokWXg/XwuLHqfATlgxk:xSqrhA/P+zVzTtdQgYEB

Entry address:
0x2E20

Entry point:
B8, 1C, F7, 4A, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 91, 00, 81, EE, 5A, BD, 28, 33, BC, 41, D8, C5, 92, C9, 32, 25, 15, F7, C9, 22, ED, 87, 96, 06, 95, 21, 3B, EB, 93, 64, B8, 4D, 08, 45, 2E, F7, BE, 02, 26, 20, 3D, 9A, FF, F3, 66, 74, 23, 0C, EA, B2, 7C, 03, 0B, 05, 42, 77, F6, 98, A1, AC, 4D, B6, 74, 26, 93, 4D, E9, FA, 04, 81, 01, D8, 70, 7C, 6E, D7, 6B, 48, 18, 67, D8, 88, 1F, F8, 23, 0A, 60, 36, B0, 94, 27, 66, AA...
 
[+]

Entropy:
6.1741

Packer / compiler:
PECompact v2

Code size:
352 KB (360,448 bytes)

User Start Menu Item
Name:
Z-ParSwitch.exe


Scan Z-ParSwitch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.