» BatchPhoto.exe
Overview
Analysis
File Details

BatchPhoto.exe

BatchPhoto

Bits&Coffee SRL

File name:

BatchPhoto.exe

Publisher:

Bits&Coffee (signed by Bits&Coffee SRL)

Product:

BatchPhoto

Description:

BatchPhoto - The Fastest Photo Editor

Version:

2.3.0.0

MD5:

62a6bc6bf911fde2e9aa5a80034bd2aa

SHA-1:

b8212686cd3d8f551ae2511f83b82e0949cda002

SHA-256:

55fa1866a9f1b9fa7d98df678cd93cbdeab57bbccfe790be0ba87248681e6697

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/25/2024 10:14:12 PM UTC (today)

Scan engine

Detection

Engine version

Prevx

Medium Risk Malware

3.0

File size:

1.9 MB (1,949,376 bytes)

Product version:

2.3.0.0

Original file name:

BatchPhoto.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\batchphoto\batchphoto.exe

Digital Signature

Signed by:

Bits&Coffee SRL

Authority:

The USERTRUST Network

Valid from:

10/15/2008 2:00:00 AM

Valid to:

10/16/2009 1:59:59 AM

Subject:

CN=Bits&Coffee SRL, O=Bits&Coffee SRL, STREET="str. Spania nr. 4, bl. P6, ap. 3", L=Craiova, S=Dolj, PostalCode=200726, C=RO

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

1E629466FF3B48A1E8B3042AAD5F6844

File PE Metadata

Compilation timestamp:

11/26/2008 3:04:50 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

83.82

CTPH (ssdeep):

24576:YA1HDMOTMBPgn+Ys9Kpp06N2WOfFEcJPXjCnVGiXuLXb2T:LHsiU9KJG9VJPWVoXST

Entry address:

0xD9000

Entry point:

60, E8, 00, 00, 00, 00, 5D, 50, 51, 0F, CA, F7, D2, 9C, F7, D2, 0F, CA, EB, 0F, B9, EB, 0F, B8, EB, 07, B9, EB, 0F, 90, EB, 08, FD, EB, 0B, F2, EB, F5, EB, F6, F2, EB, 08, FD, EB, E9, F3, EB, E4, FC, E9, 9D, 0F, C9, 8B, CA, F7, D1, 59, 58, 50, 51, 0F, CA, F7, D2, 9C, F7, D2, 0F, CA, EB, 0F, B9, EB, 0F, B8, EB, 07, B9, EB, 0F, 90, EB, 08, FD, EB, 0B, F2, EB, F5, EB, F6, F2, EB, 08, FD, EB, E9, F3, EB, E4, FC, E9, 9D, 0F, C9, 8B, CA, F7, D1, 59, 58, 50, 51, 0F, CA, F7, D2, 9C, F7, D2, 0F, CA, EB, 0F, B9, EB... 
[+]

Entropy:

6.7129

Packer / compiler:

ASPack v1.08.04

Code size:

316 KB (323,584 bytes)

Scan BatchPhoto.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.