hibr2bin.exe

MoonSols Windows Memory Toolkit

MoonSols SARL

Publisher:
MoonSols Limited  (signed by MoonSols SARL)

Product:
MoonSols Windows Memory Toolkit

Description:
hibr2bin

Version:
2.0.0.0

MD5:
defd164dcfe037e0f6fec30b8f6a1c03

SHA-1:
02b85bc7f815edb4fdab25da1732b93ea9c2c463

SHA-256:
89aa73443d0ca4726729a80c1d040e3affec424a81a6e7d55cfb35bfcb8778c2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 2:02:58 PM UTC  (today)

File size:
439.5 KB (450,080 bytes)

Product version:
2.0.0.0

Copyright:
Copyright (C) 2013

Original file name:
hibr2bin.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Digital Signature
Signed by:

Authority:
GlobalSign nv-sa

Valid from:
12/5/2012 8:27:24 AM

Valid to:
3/3/2016 6:35:10 AM

Subject:
CN=MoonSols SARL, OU=Redteam, O=MoonSols SARL, L=NAUROY, S=Picardie, C=FR

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C16F9B80A3F827F3715274F748AC6BAA

File PE Metadata
Compilation timestamp:
5/26/2014 9:05:59 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
3072:hvNCO39G7kbq6BhPuBwGfVXgjKycabtufrm9h3dX:hlCO39G7BqGfVXgj1cDmZX

Entry address:
0x553D

Entry point:
E8, FC, 4B, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, FF, 15, 44, E0, 40, 00, 6A, 01, A3, C4, 51, 41, 00, E8, 17, 4D, 00, 00, FF, 75, 08, E8, 35, 50, 00, 00, 83, 3D, C4, 51, 41, 00, 00, 59, 59, 75, 08, 6A, 01, E8, FD, 4C, 00, 00, 59, 68, 09, 04, 00, C0, E8, 03, 50, 00, 00, 59, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, B0, 7F, 00, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, A8, 4F, 41, 00, 89, 0D, A4, 4F, 41, 00, 89, 15, A0, 4F, 41, 00, 89, 1D, 9C, 4F, 41, 00, 89, 35, 98, 4F, 41, 00, 89, 3D, 94...
 
[+]

Entropy:
5.2330

Code size:
49.5 KB (50,688 bytes)

Scan hibr2bin.exe - Powered by Reason Core Security