home

gdimagebox2.ocx

GdImageBox 2 - Image Viewer ActiveX

ORPALIS

Publisher:
gdpicture.com  (signed by ORPALIS)

Product:
GdImageBox 2 - Image Viewer ActiveX

Version:
2.08.0014

MD5:
e82417a4fcccd5d46034a2950465cab9

SHA-1:
afb540cbd79d6a59d332e17c34f5c3938815c170

SHA-256:
bd844d0e721c0efa7262913bc46fedf0693e6e03ca22564a1de4c020c4e42db1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:52:18 PM UTC  (a few moments ago)

File size:
1 MB (1,053,320 bytes)

Product version:
2.08.0014

Copyright:
© 2004 - 2009

Trademarks:
GdPicture

Original file name:
gdimagebox2.ocx

File type:
OLE control extension (Win32 OCX)

Language:
English (United States)

Common path:
C:\windows\syswow64\gdimagebox2.ocx

Digital Signature
Signed by:
ORPALIS

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
10/29/2008 5:30:00 AM

Valid to:
11/21/2010 5:29:59 AM

Subject:
CN=ORPALIS, OU=COMPUTERS, O=ORPALIS, L=Toulouse, S=Haute Garonne, C=FR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
4405EB9B23DFE2A7ED5F3DFC880CBCB3

File PE Metadata
Compilation timestamp:
6/3/2009 3:05:19 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:pAb94h+EDRFCnSeeqjFRa8/4Tle8b8x6n3+Wfa5HnPa1KeyanCUSPOuDEzUccyIm:pdZRFCn/axM6n3+WgHnPA2aFjuDY4w

Entry address:
0x44B0

Entry point:
5A, 68, 3C, 8E, 0A, 11, 68, 40, 8E, 0A, 11, 52, E9, E9, FF, FF, FF, 00, 00, 00, B8, 00, 00, 00, 30, 00, 00, 00, 68, 00, 00, 00, 40, 00, 00, 00, B3, 8C, B7, AD, A7, BC, 68, 4E, AE, AF, 95, 9F, 95, 4F, F1, 17, 00, 00, 00, 00, 02, 00, 01, 00, 08, 00, 69, 63, 20, 43, 6F, 6E, 47, 64, 49, 6D, 61, 67, 65, 42, 6F, 78, 32, 00, 35, 53, 00, 0A, 47, 64, 49, 6D, 61, 67, 65, 42, 6F, 78, 20, 32, 20, 2D, 20, 49, 6D, 61, 67, 65, 20, 56, 69, 65, 77, 65, 72, 20, 41, 63, 74, 69, 76, 65, 58, 00, 53, 61, 66, 65, 44, 3A, 5C, 70...
 
[+]

Entropy:
6.3235

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
652 KB (667,648 bytes)

Scan gdimagebox2.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.