» canal+ yomvi.exe
Overview
Analysis
File Details

canal+ yomvi.exe

CANAL+ YOMVI

Nagravision Cheseaux

File name:

canal+ yomvi.exe

Publisher:

Prisa TV (signed by Nagravision Cheseaux)

Product:

CANAL+ YOMVI

Version:

1.1.10.0

MD5:

6e542d0095c4505b970eb049f174a2af

SHA-1:

63748fbfa7bb63cc1d1b955f20ecc48b5f6564fe

SHA-256:

62bada2aed33d35dd95453c2cad5a895d8405f8588914449b002ac3d160a7905

Scanner detections:

4 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

4/26/2024 12:06:35 AM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

HW32.Packed

1.3.0.6379

IKARUS anti.virus

Trojan.SuspectCRC

t3scan.1.8.9.0

Trend Micro House Call

Suspicious_GEN.F47V0220

7.2.226

VIPRE Antivirus

Trojan.Win32.Generic.pak!cobra

40264

File size:

13.8 MB (14,461,729 bytes)

Product version:

1.1.10.0

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\canal+ yomvi\canal+ yomvi.exe

Digital Signature

Signed by:

Nagravision Cheseaux

Authority:

Nagravision Cheseaux

Valid from:

6/15/2010 3:54:10 PM

Valid to:

6/15/2030 3:54:10 PM

Subject:

CN=Nagravision SA, OU=NMP.NICA.00000001, O=Nagravision Cheseaux, C=CH

Issuer:

CN=Nagravision SA, OU=ALL.NRCA.38a7abc183b4e1d67a6383fc6c6a0c4e5e68c942, O=Nagravision Cheseaux, C=CH

Serial number:

0E474948FC4D5553

File PE Metadata

Compilation timestamp:

4/26/2012 3:04:07 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

196608:54CIhbhFHxyteop9PPAdaf1vpjOl+FcRNbAVwdqXlzrc9xYYltsrYMalR//:izanPTBk+FcRxkaqXlkPm/2/

Entry address:

0x10509A

Entry point:

E9, 71, E3, EF, FF, E9, 36, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, F8, 23, 3F, 00, FF, 25, F4, 23, 3F, 00, 8B, FF, 55, 8B, EC, F6, 45, 08, 02, 57, 8B, F9, 74, 25, 56, 68, A8, 5A, 4F, 00, 8D, 77, FC, FF, 36, 6A, 0C, 57, E8, 4F, FC, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 37, 45, FE, FF, 59, 8B, C6, 5E, EB, 14, E8, B4, 09, 00, 00, F6, 45, 08, 01, 74, 07, 57, E8, 20, 45, FE, FF, 59, 8B, C7, 5F, FC, ED, 0D, 6C, CC, CC, CC, CC, CC, CC, CC, CC, A1, CB, 18, 24, A6, 00, 50, 53, A5, 3E... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

13.8 MB (14,482,209 bytes)

Scan canal+ yomvi.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.