» allcapture.exe
Overview
Analysis
File Details

allcapture.exe

balesio GmbH & Co. KG

File name:

allcapture.exe

Publisher:

balesio GmbH & Co. KG (signed and verified)

Description:

ALLCapture Enterprise Trial

Version:

3.0.0.176

MD5:

b45419d9fba66b382d9f0aeb1a4ab7ff

SHA-1:

1419aadcf234c0dd396fd441aae0134e83097d5c

SHA-256:

e6ea0862480550551b6d3e552f2d66c996131544891604c91eb6fa455cb1ec13

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/4/2024 8:13:58 PM UTC (today)

File size:

1.4 MB (1,467,680 bytes)

Product version:

3.0.0.176

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\allcapture 3.0 testversion\allcapture.exe

Digital Signature

Signed by:

balesio GmbH & Co. KG

Authority:

VeriSign, Inc.

Valid from:

3/16/2007 1:00:00 AM

Valid to:

3/16/2008 12:59:59 AM

Subject:

CN=balesio GmbH & Co. KG, OU=Support, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=balesio GmbH & Co. KG, L=Reutlingen, S=Baden Wuerttemberg, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0225B1FAE29471A316F7D23218D59B22

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:POVh2wWSj4MZWfFfGVkHljqDWsJhIOCbesEfXf+jOkMLjVEyEMMm7MP+h2q67:2Vguj1YFua6DhkjE3oOkMLJ8MMpQ67

Entry address:

0x1000

Entry point:

68, 01, C0, 8A, 00, E8, 01, 00, 00, 00, C3, C3, AA, 80, CE, C1, DE, E3, 32, C6, B6, 8C, 93, 45, EE, DC, 7B, 31, 5F, 63, B9, 7C, 11, 31, 31, A1, 13, 5A, 55, CB, 21, 64, E5, 39, 2F, 77, B7, B7, D9, 67, 42, 2B, 44, 67, 95, 80, B7, A1, CB, 24, E8, 0F, AD, 77, CB, 09, 76, 87, C3, D2, 70, 11, FB, 6E, 4E, A5, 00, 36, 48, 04, F3, EA, 8B, 04, 06, AC, A3, 92, B4, E3, 0F, 16, FF, 7A, 1E, 34, FF, DC, F3, B4, 55, EB, 49, 18, 7C, 96, 4C, F8, A1, BB, 0D, 4C, 0A, E5, 2B, 4A, 22, 66, 7B, 3A, 4B, 7A, AF, C6, E6, C4, 9B, 3F... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

2.8 MB (2,967,552 bytes)

Scan allcapture.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.