» esbcalcport.exe
Overview
Analysis
File Details

esbcalcport.exe

ESBCalc

Crowning Star Holdings Pty Ltd Trading As ESB Consultancy

File name:

esbcalcport.exe

Publisher:

ESB Consutlancy (signed by Crowning Star Holdings Pty Ltd Trading As ESB Consultancy)

Product:

ESBCalc

Description:

ESBCalc- Handy Scientific Calculator

Version:

7.2.0.441

MD5:

9e5c101b9f24b4a3272c0d5208330c00

SHA-1:

885c6c278f50ccdec98884ec55ef16cf1068f4cf

SHA-256:

39b8fb9efb5e55c51dc6bb2577079d29b71eb25cbdd2d6a722c6bee7be7a1ab8

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/24/2024 6:28:37 AM UTC (today)

Scan engine

Detection

Engine version

AVG

Crowning Star Holdings Pty Ltd Trading As ESB Consultancy

2016.0.3014

File size:

699.8 KB (716,568 bytes)

Product version:

7.2.0.439

Trademarks:

ESBCalc

Original file name:

ESBCalc

File type:

Executable application (Win32 EXE)

Language:

English (Australia)

Common path:

C:\users\faberf99\calcolatrice_2014\esbcalcport.exe

Digital Signature

Signed by:

Crowning Star Holdings Pty Ltd Trading As ESB Consultancy

Authority:

The USERTRUST Network

Valid from:

11/30/2009 1:00:00 AM

Valid to:

12/1/2010 12:59:59 AM

Subject:

CN=Crowning Star Holdings Pty Ltd Trading As ESB Consultancy, O=Crowning Star Holdings Pty Ltd Trading As ESB Consultancy, STREET=337 Forrest Street, STREET=(or PO Box 2259), L=Boulder, S=Western Australia, PostalCode=6432, C=AU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

33FBECF0C8CCFAACBB88DA8421C4DEB0

File PE Metadata

Compilation timestamp:

5/14/2010 3:45:03 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:X3PKH9dRY3RmuYLvoEFFw3b5K0kSGUsu5G4991X4tUG8K3A6:vKTRWzYLvoCSGDUG499J4WKQ6

Entry address:

0x1F5001

Entry point:

60, E8, 03, 00, 00, 00, E9, EB, 04, 5D, 45, 55, C3, E8, 01, 00, 00, 00, EB, 5D, BB, ED, FF, FF, FF, 03, DD, 81, EB, 00, 50, 1F, 00, 83, BD, 7D, 04, 00, 00, 00, 89, 9D, 7D, 04, 00, 00, 0F, 85, C0, 03, 00, 00, 8D, 85, 89, 04, 00, 00, 50, FF, 95, 09, 0F, 00, 00, 89, 85, 81, 04, 00, 00, 8B, F0, 8D, 7D, 51, 57, 56, FF, 95, 05, 0F, 00, 00, AB, B0, 00, AE, 75, FD, 38, 07, 75, EE, 8D, 45, 7A, FF, E0, 56, 69, 72, 74, 75, 61, 6C, 41, 6C, 6C, 6F, 63, 00, 56, 69, 72, 74, 75, 61, 6C, 46, 72, 65, 65, 00, 56, 69, 72, 74... 
[+]

Packer / compiler:

ASPack v2.12

Code size:

1.5 MB (1,598,976 bytes)

Scan esbcalcport.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.