home

dmg_merry.exe

Robot

Addwe Technology Co., LTD.

Publisher:
Addwe Technology Co., LTD.  (signed and verified)

Product:
Robot

Version:
1, 0, 0, 1

MD5:
bbd454936970de7820609cf90a5d082f

SHA-1:
005f27b8fa007e047947308cd0300a74b0ef5036

SHA-256:
eddaa24068c7cc92c759b9ec715738765963b32f215944c1890a8c8cbfb58d18

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:24:14 PM UTC  (today)

File size:
758.5 KB (776,728 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2008

Original file name:
Robot.rc

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mgmary\dmg_merry.exe

Digital Signature
Signed by:
Addwe Technology Co., LTD.

Authority:
GlobalSign nv-sa

Valid from:
5/2/2013 4:09:30 PM

Valid to:
5/2/2016 4:09:30 PM

Subject:
CN="Addwe Technology Co., LTD.", OU=Addwe IT Dept, O="Addwe Technology Co., LTD.", L=Taipei, S=Taiwan, C=TW

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112117002DE74F83F28AC7DF0781853EC259

File PE Metadata
Compilation timestamp:
6/2/2010 6:33:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:0To6EH6p/5azNEYskkxWecB0vBPGYhNPnIGjhj9j/j+ojHjnrTFwe6Rq1YR+zyY+:07jCEYE/11h79rTCe6Rq1g+zy+sznfh/

Entry address:
0x4BE2B

Entry point:
E8, 2F, C5, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 10, DE, 48, 00, 89, 0D, 0C, DE, 48, 00, 89, 15, 08, DE, 48, 00, 89, 1D, 04, DE, 48, 00, 89, 35, 00, DE, 48, 00, 89, 3D, FC, DD, 48, 00, 66, 8C, 15, 28, DE, 48, 00, 66, 8C, 0D, 1C, DE, 48, 00, 66, 8C, 1D, F8, DD, 48, 00, 66, 8C, 05, F4, DD, 48, 00, 66, 8C, 25, F0, DD, 48, 00, 66, 8C, 2D, EC, DD, 48, 00, 9C, 8F, 05, 20, DE, 48, 00, 8B, 45, 00, A3, 14, DE, 48, 00, 8B, 45, 04, A3, 18, DE, 48, 00, 8D, 45, 08, A3, 24, DE, 48...
 
[+]

Entropy:
6.0246

Code size:
421.5 KB (431,616 bytes)

Scan dmg_merry.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.