home

32bitproxy.exe

OESIS Local

OPSWAT, Inc.

Publisher:
OPSWAT, Inc.  (signed and verified)

Product:
OESIS Local

Description:
32Bit Proxy

Version:
3.5.7497.2

MD5:
b7090b05361a513dfbed7ad81cc597ed

SHA-1:
b55b22da9865f57a7a5d21707c09bc4955a17156

SHA-256:
a16453a26be3a6dfe4db1d5518bf7917c15b85fbb6701acff00617c44677c5f9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 6:20:22 AM UTC  (today)

File size:
34.8 KB (35,648 bytes)

Product version:
3.5.7497.2

Copyright:
© OPSWAT, Inc. All rights reserved.

Original file name:
32BitPro.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\peagent\oesis\32bitproxy.exe

Digital Signature
Signed by:
OPSWAT, Inc.

Authority:
VeriSign, Inc.

Valid from:
8/8/2012 8:00:00 AM

Valid to:
8/9/2015 7:59:59 AM

Subject:
CN="OPSWAT, Inc.", OU=Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="OPSWAT, Inc.", L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A357339C3B74C1FE1DEB8981CF0278D

File PE Metadata
Compilation timestamp:
8/13/2013 4:39:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
768:nnvElOrFiZx0PnzlZuruJLab3uPSB/iG:nd8Zx0vHtSB/t

Entry address:
0x1000

Entry point:
B8, F8, 51, 41, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 96, 8E, 86, FE, 81, D8, 2B, 4C, C3, 81, 18, AA, 18, CF, D8, 60, CA, 55, D0, 8A, DF, 6D, E8, 62, 32, EF, 8E, A3, 6C, 21, 62, 32, 23, 75, 50, 62, FF, 51, 59, A3, E5, AA, E2, 0E, 6E, 53, AE, 39, 05, 68, 29, B4, 5C, 90, 72, 13, 55, 46, 51, 5B, B3, F0, F5, D2, 5A, B6, D6, D7, 1F, 95, 02, 23, 5C, 9D, D1, 4B, 1C, 15, B3, A1, 61, 4D, 47, 3E, 2C, 24, 8F, 31, 88, 34, 02, 10, 37...
 
[+]

Entropy:
7.7366

Packer / compiler:
PECompact v2

Code size:
36 KB (36,864 bytes)

Scan 32bitproxy.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.