» efficientaddressbookfree.exe
Overview
Analysis
File Details
Behaviors (1)

efficientaddressbookfree.exe

Efficient Address Book Free

Chongqing Yifei Technology Co., Ltd.

File name:

Publisher:

Efficient Software (signed by Chongqing Yifei Technology Co., Ltd.)

Product:

Efficient Address Book Free

Version:

5.10.0.512

MD5:

9827659fbfb1cb32191ee63c32152be8

SHA-1:

8b50f979f11cc1b6e2cc27ae61679d54c5a51823

SHA-256:

1eaf49f14c8a2b8f46edfba6c67541b930e5babb25a56c3278920e55413b5219

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 7:22:52 PM UTC (today)

File size:

27.5 MB (28,857,000 bytes)

Product version:

5.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\efficient address book free\efficientaddressbookfree.exe

Digital Signature

Signed by:

Chongqing Yifei Technology Co., Ltd.

Authority:

GlobalSign nv-sa

Valid from:

8/23/2013 6:52:57 AM

Valid to:

8/23/2016 6:52:57 AM

Subject:

E=support@efficientsoftware.net, CN="Chongqing Yifei Technology Co., Ltd.", O="Chongqing Yifei Technology Co., Ltd.", L=Chongqing, S=Chongqing, C=CN

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11211D0E22EBD3108B937222E95EBA804B7B

File PE Metadata

Compilation timestamp:

11/25/2015 11:12:04 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:bqioQMkf8pS7v1DRRSxtlXF9Z8uNSG3nGOzTDwIJmv8JGZ1fXzrxI12DLqYr2rGw:ToJezSXlXXKvN22DLqYGb

Entry address:

0x1530628

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, E0, 65, 90, 01, E8, 1F, 0A, AE, FE, 8B, 1D, 98, 9E, 97, 01, B2, 01, A1, 50, A8, 8E, 01, E8, 4D, EC, FB, FF, E8, EC, 26, FC, FF, 84, C0, 75, 1B, 6A, 00, 33, C9, BA, 5C, 07, 93, 01, A1, C8, 51, 90, 01, E8, 95, 50, FD, FF, 84, C0, 0F, 85, DA, 00, 00, 00, B2, 01, A1, B8, 71, 0D, 01, E8, 1D, BB, 7A, FF, E8, E4, BD, 7A, FF, B2, 01, A1, DC, 6B, FA, 00, E8, D8, 75, 67, FF, E8, 63, D5, FA, FF, E8, CA, D2, FA, FF, A1, A0, 89, 49, 01, E8, 2C, 84, B6, FF, 84, C0, 74, 1B, B2, 01, A1, 50... 
[+]

Entropy:

6.5614

Developed / compiled with:

Microsoft Visual C++

Code size:

21.2 MB (22,214,656 bytes)

User Start Menu Item

Name:

EfficientAddressBookFree.exe

Scan efficientaddressbookfree.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.