home

DinkeyChange.exe

DinkeyChange

Microcosm Ltd

Publisher:
Microcosm Ltd  (signed and verified)

Product:
DinkeyChange

Version:
6.1.2.2

MD5:
98afeb43d9188d3bb47374755ad86d72

SHA-1:
6bc0b688413e0510fbc08b18f3a8416b995c8f27

SHA-256:
fe331122a37edf57548b64699a4646a388cacbd3dbc21f279d451ed70a99e549

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 6:22:45 PM UTC  (today)

File size:
315.6 KB (323,168 bytes)

Product version:
6.1.2.2

Copyright:
Copyright (c) 2009-12 Microcosm Ltd.

Original file name:
DinkeyChange.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\Program Files\cathie associates\opile\dinkeychange.exe

Digital Signature
Signed by:
Microcosm Ltd

Authority:
COMODO CA Limited

Valid from:
7/12/2011 1:00:00 AM

Valid to:
7/12/2013 12:59:59 AM

Subject:
CN=Microcosm Ltd, O=Microcosm Ltd, STREET=1 Eastfield Road, STREET=Westbury-on-Trym, L=Bristol, S=Avon, PostalCode=BS9 4AD, C=GB

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E277493D55147D027ECC6A34398647DF

File PE Metadata
Compilation timestamp:
4/24/2012 3:04:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
6144:Iop+UAeu5IkY0gtDbldHKNT1xSYmCBwHMjl9TT:sdeu6kdgNlgRQJS

Entry address:
0x17700

Entry point:
55, 8B, EC, 6A, FF, 68, 38, F2, 41, 00, 68, 78, A0, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A8, 53, 56, 57, 89, 65, E8, FF, 15, 34, D5, 42, 00, 33, D2, 8A, D4, 89, 15, 0C, 88, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 08, 88, 42, 00, C1, E1, 08, 03, CA, 89, 0D, 04, 88, 42, 00, C1, E8, 10, A3, 00, 88, 42, 00, E8, 54, 03, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 49, 01, 00, 00, 83, C4, 04, E8, 11, 27, 00, 00, 85, C0, 75, 0A, 6A, 10, E8, 36, 01, 00, 00, 83, C4, 04, C7, 45, FC...
 
[+]

Entropy:
7.0688

Developed / compiled with:
Microsoft Visual C++

Code size:
113 KB (115,712 bytes)

Scan DinkeyChange.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.