» allcapture.exe
Overview
Analysis
File Details

allcapture.exe

balesio GmbH & Co. KG

File name:

allcapture.exe

Publisher:

balesio GmbH & Co. KG (signed and verified)

Description:

ALLCapture Enterprise Trial

Version:

3.0.0.205

MD5:

9494b781f314de53b221642626283d7e

SHA-1:

30e04712694c1f39070b6052965cc272d34c2efc

SHA-256:

37934de5d516a6fedc3661dc0810d4b97ea7653b8022e214ecda3c25e11e1aad

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 3:38:04 AM UTC (today)

File size:

1.4 MB (1,487,648 bytes)

Product version:

3.0.0.205

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\allcapture 3.0 essai\allcapture.exe

Digital Signature

Signed by:

balesio GmbH & Co. KG

Authority:

VeriSign, Inc.

Valid from:

3/16/2007 1:00:00 AM

Valid to:

3/16/2008 12:59:59 AM

Subject:

CN=balesio GmbH & Co. KG, OU=Support, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=balesio GmbH & Co. KG, L=Reutlingen, S=Baden Wuerttemberg, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0225B1FAE29471A316F7D23218D59B22

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:DS/XxZsKv5fnmPI4lbyQBlT3DbOhiHNR7Pm+kLTFRij+d6tRtMMm7MP+h236:D+hZBxP2b13DbOY6A+dkjMMps

Entry address:

0x1000

Entry point:

68, 01, A0, 8B, 00, E8, 01, 00, 00, 00, C3, C3, AA, 80, CE, C1, DE, E3, 32, C6, B6, 8C, 93, 45, EE, DF, C3, 31, 5F, 63, B9, 7C, 11, 31, 31, A1, 13, 5A, 51, A7, FF, A4, 91, 7C, 61, 02, 00, FF, 21, 4F, EF, 6F, 8D, B7, 80, 69, 05, 7C, 2B, 78, 80, A9, 07, 08, 5D, A8, DC, C0, 10, 7F, 8C, 2A, 6E, 60, 93, ED, 4B, A2, 4D, B7, BE, E4, 6E, 6B, 2B, 86, 71, 65, 81, D8, CA, 2A, 54, 12, 09, D1, A9, B5, 96, C2, 8A, 5F, 26, EE, E2, AA, 2F, E6, 4C, C8, 42, B6, 69, FA, C0, 28, 03, 9C, A8, 73, B5, 0B, 4D, 41, 99, B1, 18, 59... 
[+]

Entropy:

7.9647

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

2.9 MB (3,015,168 bytes)

Scan allcapture.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.