home

endpoint-ce.exe

NetIQ Corporation

Publisher:
NetIQ Corporation  (signed and verified)

MD5:
5606ec735dcc7ce695dc9aa0f89fa824

SHA-1:
f1068db3d3242286f6235524f257b8a3eb77927f

SHA-256:
2648865bb1ca3376a09a64296ddf3466a16813985217359a8f7395190f33c1bb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:56:03 AM UTC  (today)

File size:
338.1 KB (346,248 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\software\chariot5.4\endpoint-ce.exe

Digital Signature
Signed by:
NetIQ Corporation

Authority:
VeriSign, Inc.

Valid from:
6/3/2003 5:30:00 AM

Valid to:
6/11/2004 5:29:59 AM

Subject:
CN=NetIQ Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NetIQ Corporation, L=San Jose, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign, Inc."

Serial number:
5741AC252F1BF0AE24A2A44D092CB79C

File PE Metadata
Compilation timestamp:
12/13/2003 12:11:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:

Linker version:
6.20

CTPH (ssdeep):
6144:XUyQMQZXZ1DZ8VqaoIETFqUXjr/4YyqxDbVCD0c4yJlSvTkCsHh+IObSVHh4cIM:KMQZPaIQW/CDhFJlkTa+yJJIM

Entry address:
0x45624

Entry point:
F0, 40, 2D, E9, 00, 40, A0, E1, 01, 50, A0, E1, 02, 60, A0, E1, 03, 70, A0, E1, 06, 00, 00, EB, 07, 30, A0, E1, 06, 20, A0, E1, 05, 10, A0, E1, 04, 00, A0, E1, AB, 59, FF, EB, F0, 40, BD, E8, 17, 00, 00, EA, 00, 40, 2D, E9, 20, 10, 9F, E5, 18, 00, 9F, E5, 07, 00, 00, EB, 0C, 10, 9F, E5, 04, 00, 9F, E5, 00, 40, BD, E8, 03, 00, 00, EA, 7C, 72, 05, 00, 80, 72, 05, 00, 84, 72, 05, 00, 88, 72, 05, 00, 30, 40, 2D, E9, 00, 40, A0, E1, 01, 50, A0, E1, 04, 00, 00, EA, 00, 00, 94, E5, 00, 00, 50, E3, 0F, E0, A0, 11...
 
[+]

Entropy:
5.8094

Packer / compiler:
PocketPC, 0xARM

Code size:
274 KB (280,576 bytes)

Scan endpoint-ce.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.