home

CloseApp.exe

AppClose

SHK Engineering and Consulting GmbH & Co. KG

Publisher:
SHK Engineering and Consulting GmbH&Co.KG  (signed by SHK Engineering and Consulting GmbH & Co. KG)

Product:
AppClose

Description:
Detect running applications

Version:
1.01

MD5:
484b652522fff8eb1ebcbf58e0ebe475

SHA-1:
8fa76330416e0a1a86251aca8ac81a1a85b1ccb1

SHA-256:
feb2d58c9f563e2d25004bf11d1126e1a842691a9eb4d5ddde1eefb53bf3f18a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:02:17 PM UTC  (today)

File size:
28.1 KB (28,768 bytes)

Product version:
1.01

Copyright:
SHK

Trademarks:
SHK

Original file name:
CloseApp.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\closeapp.exe

Digital Signature
Signed by:
SHK Engineering and Consulting GmbH & Co. KG

Authority:
GlobalSign nv-sa

Valid from:
3/1/2011 3:15:01 PM

Valid to:
3/1/2014 3:14:58 PM

Subject:
E=info@shk.com, CN=SHK Engineering and Consulting GmbH & Co. KG, O=SHK Engineering and Consulting GmbH & Co. KG, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012E708A9BF6

File PE Metadata
Compilation timestamp:
12/2/2011 9:18:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
192:rS0q7fN3yfOM6JF4dkp333ppMrQfzUnchD30T3E+JqinzeuD0BfzzSNue3:rVq1M6JF4dkN3ZpMcoyD30TU9MzmZRe3

Entry address:
0x1298

Entry point:
68, EC, 13, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 78, 00, 00, 00, 40, 00, 00, 00, 27, 17, BD, 1C, 9A, 30, 60, 41, 81, 6A, 12, D9, 97, F5, A8, 15, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 30, 30, 32, 30, 34, 33, 41, 70, 70, 43, 6C, 6F, 73, 65, 00, 30, 30, 2D, 43, 30, 30, 30, 64, 65, 74, 65, 63, 74, 20, 72, 75, 6E, 6E, 69, 6E, 67, 20, 61, 70, 70, 6C, 69, 63, 61, 74, 69, 6F, 6E, 73, 20, 61, 6E, 64, 20, 70, 72, 6F, 6D, 70, 74, 73, 20, 74, 6F, 20, 63, 6C, 6F, 73, 65, 20, 69, 74, 00...
 
[+]

Entropy:
3.8633

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
12 KB (12,288 bytes)

Scan CloseApp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.