» buchen2.exe
Overview
Analysis
File Details
Programs (1)

buchen2.exe

Kassenbuch 4

Sven Brinkmann

This is installed with Softwarenetz Kassenbuch4.

File name:

buchen2.exe

Publisher:

Softwarenetz (signed by Sven Brinkmann)

Product:

Kassenbuch 4

Description:

Kassenbuch

Version:

4.15

MD5:

59c9c56e043dd17a3ec6db65a0e9e75b

SHA-1:

5595a8d2dab924eb9bf8f2e871d23d5771ae518d

SHA-256:

0699768992e1b01815e783356211409db6d844fdea8fbe43abe7ff475c4719de

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/11/2024 12:47:45 AM UTC (today)

File size:

4.3 MB (4,488,328 bytes)

Product version:

4.15

Original file name:

buchen2.exe

File type:

Executable application (Win32 EXE)

Language:

German (Germany)

Digital Signature

Signed by:

Sven Brinkmann

Authority:

Thawte, Inc.

Valid from:

5/7/2012 2:00:00 AM

Valid to:

7/1/2013 1:59:59 AM

Subject:

CN=Sven Brinkmann, OU=SECURE APPLICATION DEVELOPMENT, O=Sven Brinkmann, L=Schoeneck, S=Hessen, C=DE

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

08308C0A955B6F47E4FFD7B043E118B6

File PE Metadata

Compilation timestamp:

7/4/2012 11:53:20 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:Ej0bJuU1wqd1KRA3WxKbmKhP08tsRf7vv3gxf:t46l7KROKYmwNsh7vv3g

Entry address:

0xEA498

Entry point:

E8, 5E, A9, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 28, 53, 56, FF, 75, 0C, 8D, 4D, F0, E8, E3, ED, FF, FF, 8B, 75, 08, 33, DB, 3B, F3, 75, 28, E8, 6E, 19, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 4E, 55, 00, 00, 83, C4, 14, 38, 5D, FC, 74, 07, 8B, 45, F8, 83, 60, 70, FD, D9, EE, EB, 61, 8B, 45, F0, 83, B8, AC, 00, 00, 00, 01, 7E, 14, 8D, 45, F0, 50, 0F, B6, 06, 6A, 08, 50, E8, D9, 8D, 00, 00, 83, C4, 0C, EB, 10, 0F, B6, 0E, 8B, 80, C8, 00, 00, 00, 0F, B7, 04, 48, 83, E0, 08... 
[+]

Code size:

1.1 MB (1,121,280 bytes)

The file buchen2.exe has been discovered within the following program.

Softwarenetz Kassenbuch4 by Softwarenetz

About 1% of users remove it

Scan buchen2.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.