» ABLEVSTOUpdateHelper.exe
Overview
Analysis
File Details

ABLEVSTOUpdateHelper.exe

ABLE VSTO Update Helper

AbleInfo Co.,Ltd

File name:

Publisher:

Product:

ABLE VSTO Update Helper

Description:

ABLEVSTOUpdateHelper

Version:

1.0.0.1

MD5:

78c21299a48fe28fa889ec3840d9783b

SHA-1:

0522b92a4a97258b2ee88169fc9a95a9432bdf97

SHA-256:

4c72ac1feaffa53f2f0e53fa5574d9a5d9ca602b90bb06a95d890aa8316a72a1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/30/2024 10:11:26 AM UTC (today)

File size:

1.6 MB (1,688,648 bytes)

Product version:

1.0.0.1

Original file name:

ABLEVSTOUpdateHelper.exe

File type:

Executable application (Win32 EXE)

Language:

Korean (Korea)

Common path:

C:\Program Files\ableinfo\ablemailextoutlookaddin\ablevstoupdatehelper.exe

Digital Signature

Signed by:

AbleInfo Co.,Ltd

Authority:

Thawte, Inc.

Valid from:

5/8/2015 5:30:00 AM

Valid to:

7/7/2016 5:29:59 AM

Subject:

CN="AbleInfo Co.,Ltd", O="AbleInfo Co.,Ltd", L=Gangnam-gu, S=Seoul, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

03A220F55EAC94F16631F226EDC70943

File PE Metadata

Compilation timestamp:

4/5/2016 3:47:01 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:Hl095bjnNb4BKyta7G4pnsq0uS3M4scG38/mIKHYC8aJyYH2zhWAy3Z6Za:HI5bjn141ta7G4Kq0uS84scG38/mIKY6

Entry address:

0x101531

Entry point:

E8, 20, 9F, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 8B, 7D, 08, 33, C0, 83, C9, FF, F2, AE, 83, C1, 01, F7, D9, 83, EF, 01, 8A, 45, 0C, FD, F2, AE, 83, C7, 01, 38, 07, 74, 04, 33, C0, EB, 02, 8B, C7, FC, 5F, C9, C3, 8B, FF, 55, 8B, EC, 83, EC, 14, FF, 75, 10, 8D, 4D, EC, E8, F0, FA, FF, FF, 8B, 55, 08, 85, D2, 75, 24, E8, 20, 0E, 00, 00, C7, 00, 16, 00, 00, 00, E8, 52, 65, 00, 00, 80, 7D, F8, 00, 74, 07, 8B, 45, F4, 83, 60, 70, FD, B8, FF, FF, FF, 7F, C9, C3, 53, 8B, 5D, 0C, 85, DB... 
[+]

Entropy:

6.4179

Code size:

1.1 MB (1,195,520 bytes)

Scan ABLEVSTOUpdateHelper.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.