home

dataxfer.exe

LMD RichPack

Winton Information Co., Ltd.

Publisher:
LMD Innovative  (signed by Winton Information Co., Ltd.)

Product:
LMD RichPack

Version:
1.1.0.6

MD5:
b38aea654727457c943161865befa9ff

SHA-1:
62cb455d820e59e3884f61f44622a9a0cc40978c

SHA-256:
a185035fab163ac4c5f62137d1e095043b2b3d9b1c88a6df02415b12895d9de0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:22:50 PM UTC  (today)

File size:
2.7 MB (2,853,720 bytes)

Product version:
1.10

Trademarks:
c by LMD Innovative

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\winton\wmis\datafer\dataxfer.exe

Digital Signature
Signed by:
Winton Information Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
7/29/2009 8:00:00 AM

Valid to:
7/30/2010 7:59:59 AM

Subject:
CN="Winton Information Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Winton Information Co., Ltd.", L=Taipei, S=Taipei, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3C934BF1774DEBBEE9E96F1D21117123

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:x9Em15fOgOzQyPCNMU78LksnZeQ7ZCM9KLFpsL:saDH6rLksnwIL9KLFpI

Entry address:
0x25D52C

Entry point:
55, 8B, EC, 83, C4, F4, B8, 4C, CF, 65, 00, E8, 20, A1, DA, FF, A1, 80, 22, 66, 00, 8B, 00, E8, FC, 77, DF, FF, A1, 80, 22, 66, 00, 8B, 00, BA, 8C, D5, 65, 00, E8, EF, 73, DF, FF, 8B, 0D, 08, 26, 66, 00, A1, 80, 22, 66, 00, 8B, 00, 8B, 15, 8C, 4B, 65, 00, E8, EB, 77, DF, FF, A1, 80, 22, 66, 00, 8B, 00, E8, 5F, 78, DF, FF, E8, 76, 68, DA, FF, 00, 00, FF, FF, FF, FF, 12, 00, 00, 00, B8, EA, AE, C6, AE, 77, A4, C9, AF, C5, A4, BD, A5, CE, B5, 7B, A6, A1, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6229

Developed / compiled with:
Microsoft Visual C++

Code size:
2.4 MB (2,475,520 bytes)

Scan dataxfer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.