» find-last-modified-files.exe
Overview
Analysis
File Details

find-last-modified-files.exe

Alexander Krivonogov (gentee.com)

File name:

Publisher:

Alexander Krivonogov (gentee.com) (signed and verified)

MD5:

8ee1f4f5767c5d76f53d70c95082d0ce

SHA-1:

0c178be19ba6a37686cf98184ae28daa546bccab

SHA-256:

7b64090aa95d6858db0a1d1f4f851c40aa9ecc0b4301d636ea1d17434d1ddbea

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 8:23:44 PM UTC (today)

File size:

199.8 KB (204,576 bytes)

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

Alexander Krivonogov (gentee.com)

Authority:

The USERTRUST Network

Valid from:

12/10/2008 6:00:00 PM

Valid to:

12/11/2009 5:59:59 PM

Subject:

CN=Alexander Krivonogov (gentee.com), O=Alexander Krivonogov (gentee.com), STREET=Respubliki 146-49, L=Tyumen, S=TYUMEN, PostalCode=625026, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

3F0BF1A0B76CFDE3E74EE28624840D56

File PE Metadata

Compilation timestamp:

2/16/2009 9:07:44 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:eSylVULRx/AFIQ+lHFiDSi756jL2QmOhKdy+:kGQmE3cezl

Entry address:

0x1140

Entry point:

55, 8B, EC, 6A, FF, 68, E0, A1, 40, 00, 68, C0, 12, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, B4, A0, 40, 00, 59, 83, 0D, 44, CF, 40, 00, FF, 83, 0D, 48, CF, 40, 00, FF, FF, 15, B8, A0, 40, 00, 8B, 0D, 3C, CF, 40, 00, 89, 08, FF, 15, BC, A0, 40, 00, 8B, 0D, 38, CF, 40, 00, 89, 08, A1, C0, A0, 40, 00, 8B, 00, A3, 4C, CF, 40, 00, E8, 10, 01, 00, 00, 39, 1D, 00, C1, 40, 00, 75, 0C, 68, BC, 12, 40, 00, FF, 15, C4, A0... 
[+]

Entropy:

6.1099

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

36 KB (36,864 bytes)

Scan find-last-modified-files.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.