home

EAR19.exe

EAR - Einnahmen-Ausgaben-Rechnung

Michael Hertlein

Publisher:
Internet Design & EDV Entwicklung • Michael Hertlein  (signed by Michael Hertlein)

Product:
EAR - Einnahmen-Ausgaben-Rechnung

Description:
Einnahmen-Überschuß Abrechnung für Windows ab Version XP

Version:
19.03.0027

MD5:
765b50d459204273868118defa80416c

SHA-1:
a0f664e82a847bf281a1a423c430daaf0f19ff24

SHA-256:
b56a8b2c852ffe32cba097432179a5541cb2a238e4a360f72e0f8f4fdb127003

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
7/8/2025 1:42:33 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
BACKDOOR.Trojan
9.0.1.0281

File size:
12.4 MB (13,007,432 bytes)

Product version:
19.03.0027

Copyright:
© Internet Design & EDV Entwicklung 2013

Original file name:
EAR19.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Digital Signature
Signed by:
Michael Hertlein

Authority:
Thawte, Inc.

Valid from:
1/19/2014 1:00:00 AM

Valid to:
1/20/2015 12:59:59 AM

Subject:
CN=Michael Hertlein, OU=INTERNET DESIGN & EDV ENTWICKLUNG, O=Michael Hertlein, L=Muenchen, S=Bayern, C=DE

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1EA5E547AFC3B207A5347193693E171D

File PE Metadata
Compilation timestamp:
2/6/2014 4:04:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:f8wKBeKUPF5KiaWXeUqhMfjQu42IhgapgNYwDrVOAbxBtTwcvWHpGlvaXJjWMr3e:f8wKBeKUPF5KiaWXeUqhMfjQu42Ihga2

Entry address:
0x336E8

Entry point:
68, 2C, 3F, 43, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 38, 00, 00, 00, F7, 73, A4, 5F, 8B, A4, F2, 41, 87, 4E, 8E, 3A, A1, C4, B9, E9, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 78, 20, 69, 73, 74, 20, 45, 41, 52, 31, 39, 00, 67, 61, 45, 69, 6E, 6E, 61, 68, 6D, 65, 6E, 2D, 41, 75, 73, 67, 61, 62, 65, 6E, 2D, 52, 65, 63, 68, 6E, 75, 6E, 67, 00, 74, 69, 67, 2E, 00, 00, 00, 00, 01, 00, 0E, 00, F4, 43, 48, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
12.4 MB (12,980,224 bytes)

Windows Firewall Allowed Program
Name:
einnahmen-überschuß abrechnung für windows ab version xp


Scan EAR19.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.