D7_MalwareScan.exe

MalwareScan

John Shaw

Publisher:
Foolish IT  (signed by John Shaw)

Product:
MalwareScan

Version:
4.00.0012

MD5:
6f34753f4335cbedee1a92e6563f2e33

SHA-1:
be9056174b3eb27a8e24cf9c65b43b2316a360c2

SHA-256:
1f27c6f6b7d4ba3530d2a629c01a1643748ba8420c1be1624c06b9e2598f3e15

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 5:01:13 PM UTC  (today)

File size:
1.5 MB (1,530,760 bytes)

Product version:
4.00.0012

Original file name:
D7_MalwareScan.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pcrescue!\pcr\d7_malwarescan.exe

Digital Signature
Signed by:

Authority:
StartCom Ltd.

Valid from:
2/16/2012 1:30:13 PM

Valid to:
2/17/2014 10:18:06 AM

Subject:
E=nick@obxcompguy.com, CN=John Shaw, L=Manteo NC, S=North Carolina, C=US, Description=Q060IjEkExVuy25F

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0545

File PE Metadata
Compilation timestamp:
3/1/2012 1:36:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:Rj2GkKWw4nTIElUdgnj8ZuSy/aEuirOTxGMJVQQifCEMrLaCBxkmWC2BJ1MIlqz8:h2Gv40ElUdgnj8ZuSy/alirOTx2Qc3MI

Entry address:
0xEF3C

Entry point:
68, E8, F5, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 37, 30, A7, 59, 47, B6, 39, 4E, B4, FE, 35, 2B, D9, 4C, 4C, 3B, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 43, 30, 30, 30, 2D, 4D, 61, 6C, 77, 61, 72, 65, 53, 63, 61, 6E, 00, 7D, 23, 32, 2E, 00, 00, 00, 00, 01, 00, 1E, 00, 58, BF, 41, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 4C, C5, 41, 00, 7C, A3, 55, 00, 00, 00, 00, 00, 18, F6, 1B, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7518

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
1.3 MB (1,413,120 bytes)

Scan D7_MalwareScan.exe - Powered by Reason Core Security