home

ibsheet_registration3.exe

IBSheetReg3

IB Leaders Co., Ltd.

Publisher:
11  (signed by IB Leaders Co., Ltd.)

Product:
IBSheetReg3

Version:
1.00

MD5:
042aa4e00f00325751194e3eb7ded0d4

SHA-1:
745c0ac7eec07e9c672246f1489d6344a6fb7f7d

SHA-256:
48e2c1f2dfa11456c7b85d42b899c643fdf58ca2878c61bfe88ff05d6411a99d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/16/2024 2:59:51 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.AutorunHAE.Fam
1.3.0.7062

File size:
49.1 KB (50,288 bytes)

Product version:
1.00

Original file name:
ibsheet_registration3.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Windows\System32\ibsheet_registration3.exe

Digital Signature
Signed by:
IB Leaders Co., Ltd.

Authority:
Thawte, Inc.

Valid from:
9/20/2011 9:00:00 AM

Valid to:
9/20/2013 8:59:59 AM

Subject:
CN="IB Leaders Co., Ltd.", O="IB Leaders Co., Ltd.", L="Guro-gu ", S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1D986342CC3475B419579BF38721B68E

File PE Metadata
Compilation timestamp:
8/21/2012 9:58:24 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:nu6/7PUNGgNxHJ1FAN8iS/dObzHqdo5SEXpmiGErIILhCqmC:nukEpsBS/dOb+do5NXkEngC

Entry address:
0x1974

Entry point:
68, AC, 1C, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, FF, 5F, FD, 76, C0, 21, 97, 49, AF, 25, B4, 2C, A0, B8, AD, C9, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, B7, 00, 00, 00, 49, 42, 53, 68, 65, 65, 74, 52, 65, 67, 33, 4C, 69, 62, 00, 42, 00, 00, 00, 00, FF, CC, 31, 00, 00, B0, FE, 6F, 19, A0, 78, AE, 41, 9F, DA, 7F, 74, D9, CE, 12, 81, 91, 02, C6, 79, 9F, 37, 0A, 40, BD, 2B, 0A, 6B, 49, 91, E3, BB, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
4.6633

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
32 KB (32,768 bytes)

ActiveX Install
Name:
{341FBC5F-2AE4-41B8-BFE5-A03170569A27}


Scan ibsheet_registration3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.