else_126539_cp.exe

The Sheridan Press

Publisher:
The Sheridan Press  (signed and verified)

Description:
iENGINEERING iWrapper (ELSE_126539_CP)

Version:
0, 0, 0, 0

MD5:
613edbb445cb78b047ee15edb5350067

SHA-1:
d44091b7d6198f9773991a0dc4cdd91d9ba3a3fd

SHA-256:
da060f20e28d991594c467a1a2e263dbdbc32dd8fecad6afbdecb26e1a305923

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/16/2025 2:56:33 AM UTC  (today)

File size:
2.4 MB (2,493,528 bytes)

Product version:
0, 0, 0, 0

Copyright:
Copyright © 2007 iENGINEERING Corporation

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
4/9/2007 3:00:00 AM

Valid to:
4/6/2008 2:59:59 AM

Subject:
CN=The Sheridan Press, OU=IT, O=The Sheridan Press, L=Hanover, S=Pennsylvania, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
437036C4AF4435269041C3F769CE4B00

File PE Metadata
Compilation timestamp:
5/8/2007 11:34:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:L39VZHbFmFtSw+Tt/mcLi1TgtHMtMNhLzKWunV9wNSDFtXvocXKMk:ZPbFmPSwimcLiWMtWhLzLLNS5tg6KMk

Entry address:
0x1000

Entry point:
68, 01, 40, 78, 00, E8, 01, 00, 00, 00, C3, C3, 88, 6A, 73, 14, A5, 69, 41, 03, CF, F9, 77, 2B, 52, 73, F2, 4E, 02, 27, 27, 87, A4, 27, 3C, 42, 83, A6, 25, E0, 93, 42, 39, D5, 8E, 95, 83, 9B, C0, CF, 49, A5, E9, BE, 19, 60, F9, CF, 20, 08, 6E, 42, 43, 16, DF, A0, 0A, C8, 41, B0, AD, 33, 60, BE, 9B, AA, 50, 88, 68, EB, 6A, 1B, 71, 3D, 1D, E5, BB, 6F, 56, 6E, DE, B8, C6, 8A, DC, 67, E4, 07, 0F, 80, 42, 91, 33, ED, 82, 0F, A4, 00, 3C, 44, 40, 86, 3A, 53, E3, A2, F9, 02, 42, 21, 54, F2, 50, 4E, AC, B5, CB, E7...
 
[+]

Entropy:
7.9932

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
184 KB (188,416 bytes)

Scan else_126539_cp.exe - Powered by Reason Core Security