home

hma.exe

Hitman5

Entrust.net

Publisher:
Entrust.net  (signed and verified)

Product:
Hitman5

Version:
1.0.433.1

MD5:
1977328935b3e282a4234602d95a29d0

SHA-1:
4b74f459b3bf11f5c0bc8d216b652ede4c0c439a

SHA-256:
f376bdf291e1bc4798b77e4e0d55d8e4e48572c7861efc5202850c7a2979b9df

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 10:01:45 AM UTC  (today)

File size:
33.5 MB (35,162,624 bytes)

Product version:
1.0.433.1

Copyright:
Copyright (C) 2012

Original file name:
hma.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\hitman absolution\ori\hma.exe

Digital Signature
Signed by:
Entrust.net

Authority:
Entrust.net

Valid from:
5/26/1999 12:09:40 AM

Valid to:
5/26/2019 12:39:40 AM

Subject:
CN=Entrust.net Secure Server Certification Authority, OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), O=Entrust.net, C=US

Issuer:
CN=Entrust.net Secure Server Certification Authority, OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), O=Entrust.net, C=US

Serial number:
374AD243

File PE Metadata
Compilation timestamp:
11/17/2012 12:30:20 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:QZGOZSTI9CVyzGzt+t22iqs5KEbw3yrZt1O4+6uRhkOk532dnFze/xCv7Pp1a:QZGOZSKCVOGztk22iqs5KEbKyrZvO4o4

Entry address:
0x332740

Entry point:
E8, 0B, FF, FB, FF, 68, AD, DE, 00, 80, FF, 15, 20, B1, EF, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 83, EC, 08, 53, 56, 57, 32, DB, E9, 88, 00, 00, 00, 9E, 69, 04, BD, D2, A1, BF, 9C, 5C, FE, 7C, 69, A8, 7A, FF, F3, 42, BB, 84, 6B, 8B, 12, 14, 3E, 1A, FF, 6E, DB, 5E, FE, B2, BB, F5, 14, D0, AA, 63, EB, D3, C0, D0, 26, 4F, DB, B1, D4, 21, 92, 62, 08, 30, F4, FB, 66, C5, 09, C4, E1, 15, 18, 24, 0D, 32, 1A, 04, AC, FC, 8B, AC, 2B, D6, BB, 50, E8, 8B, 00, BA, F8, 14, 3A...
 
[+]

Entropy:
5.8112

Code size:
11 MB (11,507,200 bytes)

Scan hma.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.