» button.exe
Overview
Analysis
File Details

button.exe

Vladimir Varenkov

File name:

button.exe

Publisher:

Vladimir Varenkov (signed and verified)

MD5:

7d684986a1c3ba4a514cb551c23ca1a5

SHA-1:

f4657299cce946d9fc3649ec068af50f9f87e1ed

SHA-256:

9126c0d3210390eef5b3afe43ca6506debfe21df1b326ebf601855679c21da3a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/6/2024 11:48:21 AM UTC (today)

File size:

761.3 KB (779,552 bytes)

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

Vladimir Varenkov

Authority:

StartCom Ltd.

Valid from:

3/5/2016 9:30:42 PM

Valid to:

3/5/2018 9:30:42 PM

Subject:

CN=Vladimir Varenkov, O=Vladimir Varenkov, L=Troitsk, S=Moskva Oblast, C=RU

Issuer:

CN=StartCom Class 2 Object CA, OU=StartCom Certification Authority, O=StartCom Ltd., C=IL

Serial number:

1DD4B134A0B9A4D4C1EE6326DEA25C3E

File PE Metadata

Compilation timestamp:

6/20/1992 5:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:6Fd/WbeTb6JEUQH0F1hec5ubx6Yr/7DREDdLOBmN+SV7VDMGw/EmPCP7lEwpzDcg:6bebeTb6JETUF1bIfrDDRi9NDVJoP8us

Entry address:

0x1C6000

Entry point:

EB, 02, 85, C7, 50, EB, 01, AF, E8, 18, 00, 00, 00, EB, 04, 4D, 7F, 12, 04, EB, 01, 25, 33, C0, EB, 05, 4B, 48, 64, FB, DB, 71, 61, EB, 02, 93, 5A, EB, 05, 6C, 6C, EC, CB, 96, B8, 0B, 48, FB, F6, EB, 03, 9C, 8B, 1E, EB, 01, 8F, 05, F5, B7, 04, 09, EB, 04, 47, 06, 1F, 1C, 75, 3C, EB, 03, 47, 31, 52, 64, FF, 30, EB, 03, E6, 67, A4, 64, 89, 20, EB, 03, 0C, E2, 4E, EB, 01, 61, 8B, 10, EB, 04, AC, C3, C9, 3B, 64, 8F, 00, EB, 01, 8A, 83, C4, 04, EB, 04, BD, 73, 6E, DB, 58, EB, 03, 99, 4E, BA, C3, EB, 04, F2, 8D... 
[+]

Entropy:

7.9883

Packer / compiler:

FSG v1.10 (Microsoft Visual C++ 6.0 / 7.0)

Code size:

977.5 KB (1,000,960 bytes)

Scan button.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.