home

AxBee.exe

AxBee

The court administration office

Publisher:
Seworks  (signed by The court administration office)

Product:
AxBee

Description:
대법원 인터넷 등기소

Version:
1.0.0.9

MD5:
3ba8a2f28c646e7501d0eb2ec9e3c22e

SHA-1:
62a28170ed0df08db20df8b3b0d0d9e51e9dcdb4

SHA-256:
c2b11a9a3c8ed451120d14b2fe47fce45cd939078061de827d4ec3431c12a5ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/9/2024 12:52:42 AM UTC  (today)

File size:
1.4 MB (1,470,088 bytes)

Product version:
1.0.0.9

Copyright:
Copyright (c) 2011 by Seworks. All rights reserved.

Original file name:
AxBee.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Windows\System32\axbee.exe

Digital Signature
Signed by:
The court administration office

Authority:
Thawte, Inc.

Valid from:
12/11/2013 9:00:00 AM

Valid to:
2/10/2016 8:59:59 AM

Subject:
CN=The court administration office, OU=IT Team, O=The court administration office, L=Seocho-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
63CEA1B9BE141F20D6D3CB0FEF3D0AF1

File PE Metadata
Compilation timestamp:
7/17/2014 10:00:05 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:f1Wy9D403LCUJAp3muUSVb5hHTbFIEplpl7bEa:n9Dp30xmu/Vb5hHTVpnl7b/

Entry address:
0x5CD70

Entry point:
48, 83, EC, 28, E8, F7, 19, 01, 00, 48, 83, C4, 28, E9, FE, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 58, 48, 89, 6C, 24, 68, 48, 89, 7C, 24, 78, 49, 63, 78, 0C, 4C, 89, 64, 24, 50, 4C, 89, 6C, 24, 48, 4C, 89, 74, 24, 40, 4C, 89, 7C, 24, 38, 4C, 8B, F9, 49, 8B, C8, 4D, 8B, E1, 4D, 8B, F0, 4C, 8B, EA, E8, 16, 1B, 01, 00, 85, FF, 4D, 8B, 17, 4D, 89, 14, 24, 8B, E8, 0F, 84, CE, 00, 00, 00, 48, 89, 74, 24, 70, 48, 8D, 0C, BF, 48, 89, 5C, 24, 60, 48, 8D, 34, 8D, EC, FF, FF...
 
[+]

Entropy:
5.7604

Code size:
492 KB (503,808 bytes)

ActiveX Install
Name:
{23670005-6E8F-4387-9C5D-E896EB25B898}


Scan AxBee.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.