home

Hammerhead.exe

Hammerhead

Teledyne LeCroy, Inc.

Publisher:
Teledyne LeCroy, Inc.  (signed and verified)

Product:
Hammerhead

Description:
Hammerhead for SierraNet

Version:
2.0.64

MD5:
817d7cdf7c7e3b6e5b1b0cf9742772aa

SHA-1:
281e2cf489a94afe3225aec0fbeea0d64b3422fd

SHA-256:
83ca186fb645b09c0eb2c426b993365abf6d5d0e288b64ec2130a8f581bcbd05

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/3/2024 11:00:17 PM UTC  (a few moments ago)

File size:
1 MB (1,072,592 bytes)

Product version:
2.0.64

Copyright:
Copyright (C) 2015

Original file name:
Hammerhead.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\disk1\hammerhead.exe

Digital Signature
Signed by:
Teledyne LeCroy, Inc.

Authority:
VeriSign, Inc.

Valid from:
1/2/2014 5:30:00 AM

Valid to:
1/2/2017 5:29:59 AM

Subject:
CN="Teledyne LeCroy, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Teledyne LeCroy, Inc.", L=Chestnut Ridge, S=New York, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2D0275D72EDB0040C85FA6CD0B5DB54C

File PE Metadata
Compilation timestamp:
10/27/2016 10:47:48 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

Entry address:
0x1B7C

Entry point:
E9, DF, D7, 02, 00, E9, 9A, CA, 01, 00, E9, 85, 4E, 01, 00, E9, 50, B5, 00, 00, E9, 7C, D0, 02, 00, E9, E6, F3, 00, 00, E9, 51, BF, 00, 00, E9, 6C, 9E, 02, 00, E9, 67, 9C, 02, 00, E9, F2, 70, 02, 00, E9, 5D, 82, 00, 00, E9, C8, 81, 02, 00, E9, 35, CB, 02, 00, E9, DE, C6, 00, 00, E9, B9, 9B, 02, 00, E9, 04, B5, 01, 00, E9, BF, FB, 01, 00, E9, EA, 61, 01, 00, E9, 35, AD, 01, 00, E9, 50, A0, 01, 00, E9, 3B, E0, 00, 00, E9, 46, 45, 01, 00, E9, 21, 8E, 00, 00, E9, 4C, A2, 02, 00, E9, 67, 23, 00, 00, E9, F2, 85...
 
[+]

Entropy:
6.2449

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
234 KB (239,616 bytes)

Scan Hammerhead.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.