home

179295_cp.exe

The Sheridan Press

Publisher:
The Sheridan Press  (signed and verified)

Description:
iWrapper (MAL_179295_CP)

Version:
0, 0, 0, 0

MD5:
08ee8c1f9638407a6ada35c2c56696ae

SHA-1:
faae8aeb565827a75ea9a0c610f3f8d2c8c2627e

SHA-256:
97cf63099d1b66bd5ecd166f8b367ea4b9d58bb2304f6202d86fa97ed0d2fc90

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/16/2025 2:31:18 PM UTC  (today)

File size:
3.1 MB (3,270,800 bytes)

Product version:
0, 0, 0, 0

Copyright:
Copyright © 2011 iWrapper, LLC

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\179295_cp.exe

Digital Signature
Signed by:
The Sheridan Press

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
4/11/2010 7:00:00 PM

Valid to:
4/12/2011 6:59:59 PM

Subject:
CN=The Sheridan Press, OU=IT, O=The Sheridan Press, L=Hanover, S=Pennsylvania, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
586420AE75090904EA01DD33C1A7E542

File PE Metadata
Compilation timestamp:
10/2/2007 5:49:49 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:OAwtt8V/0mdPEEp+698MvIVj2uSnKSShZp/MG:OAwH8Bdd1p+6LvMa/uZp/5

Entry address:
0x1000

Entry point:
68, 01, F0, 89, 00, E8, 01, 00, 00, 00, C3, C3, EC, 93, 3B, 59, B4, 11, 01, 4B, D5, E0, 8F, D9, 01, 43, BC, D5, 0F, E5, 92, BE, 40, 21, F2, 46, 15, 39, 65, AD, 2C, 3A, C1, 96, 1F, 28, 47, C6, 5E, 5D, A2, 17, FF, 39, 69, 6D, 60, 87, F7, 30, F9, 5C, F7, 26, 10, 87, 58, E5, 9C, D8, 51, 63, 25, 8C, 1B, F4, B6, 23, C5, 4F, 94, A3, 50, 0A, 2A, 34, 64, DC, AB, 63, 57, 2D, D4, 7F, 16, 30, 8B, 91, CF, 43, 34, 4F, 56, 73, 93, 62, 10, 07, 6D, E3, AB, 48, 89, 8B, D3, 75, 90, 8F, DF, 97, 24, B1, 8E, 8D, 24, F3, 5C, 90...
 
[+]

Entropy:
7.9958

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
184 KB (188,416 bytes)

Scan 179295_cp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.