home

6_offer_8.exe

FREETHEMEDIA player

C.K.Technologies Pvt Ltd

The program is a setup application that uses the Inno Setup installer.
Publisher:
appknowledge   (signed by C.K.Technologies Pvt Ltd)

Product:
FREETHEMEDIA player

Description:
FREETHEMEDIA player Setup

MD5:
fe7518516d3fcdaaa39c60b2ed78f7a1

SHA-1:
9548fc72eaddc5b6af8802e537e1ab28bd17505f

SHA-256:
f76fe16f9a6ae2b65a66b919208fec09b06d2505efa6c4bfb703f82d71c289a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:52:42 AM UTC  (today)

File size:
15.8 MB (16,583,632 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\6_offer_8.exe

Digital Signature
Signed by:
C.K.Technologies Pvt Ltd

Authority:
COMODO CA Limited

Valid from:
12/2/2013 1:00:00 PM

Valid to:
12/3/2014 12:59:59 PM

Subject:
CN=C.K.Technologies Pvt Ltd, O=C.K.Technologies Pvt Ltd, STREET="#2 Reddy Colony", STREET=Ramalingapuram, STREET=Nammalwarpet, L=Chennai, S=Tamilnadu, PostalCode=600012, C=IN

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
26690FB5F2D0DC7D833C0C820A02026D

File PE Metadata
Compilation timestamp:
6/20/1992 10:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:67c4HVcadutEUarlIDg1zo4uNhFXvPs4Pch1n8Ru87oDqLBvV+EH+w89:6Kt+SD+zqNhdWxWqqLOg+

Entry address:
0x9C40

Entry point:
F3, 58, 52, 84, 68, 48, 02, FF, F6, F8, B9, 72, 06, FF, 4D, F9, D0, 6F, 19, 35, 59, 5E, 37, D6, 17, 2B, 2B, 21, BD, 19, FA, D3, BF, 32, 9D, D9, 2E, 21, 3E, B9, DF, 4D, D5, 2B, 2C, DE, 52, 8F, 2F, 14, 62, 71, 72, B9, 10, 53, AA, 7B, 7F, 1C, EF, C6, C7, 55, 4E, C3, BA, C4, B4, 5C, 7D, AD, F2, 5D, 67, 2F, B3, 37, 64, 71, 79, 0C, 8E, 09, A9, 69, AE, 03, FC, 04, 62, D9, 2C, 38, 89, 88, 16, B1, E0, CD, A3, 95, 98, 07, 8F, AE, C3, 78, 19, BA, E6, AD, 2E, 94, D4, 04, 25, 62, C4, 96, BA, 53, 26, DB, 5B, B0, 35, E7...
 
[+]

Entropy:
7.9825  (probably packed)

Code size:
37 KB (37,888 bytes)

Scan 6_offer_8.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.