home

ibsheet_registration3.exe

IBSheetReg3

IB Leaders Co., Ltd.

Publisher:
11  (signed by IB Leaders Co., Ltd.)

Product:
IBSheetReg3

Version:
1.00

MD5:
97d0e866ce59cba90b68e02f967526de

SHA-1:
ae9ab2340b2077c37f2e6d0716c276368312c7cf

SHA-256:
e91c9e1c0fbe4c91d189b2d7080176cc971996dc7e3b1697154ee41eba4de3c3

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/4/2024 2:18:05 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.AutorunHAE.Fam
1.3.0.4959

File size:
49.5 KB (50,736 bytes)

Product version:
1.00

Original file name:
ibsheet_registration3.exe

File type:
Executable application (Win32 EXE)

Language:
Korean (Korea)

Common path:
C:\Windows\System32\ibsheet_registration3.exe

Digital Signature
Signed by:
IB Leaders Co., Ltd.

Authority:
Thawte, Inc.

Valid from:
9/19/2011 9:00:00 PM

Valid to:
9/19/2013 8:59:59 PM

Subject:
CN="IB Leaders Co., Ltd.", O="IB Leaders Co., Ltd.", L="Guro-gu ", S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1D986342CC3475B419579BF38721B68E

File PE Metadata
Compilation timestamp:
8/20/2012 9:58:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:nI6/7PUNGgNxHJ1FAN8iS/dObzHqdo5SEXpmiGEmKCqjr/:nIkEpsBS/dOb+do5NXkEjr/

Entry address:
0x1974

Entry point:
68, AC, 1C, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, FF, 5F, FD, 76, C0, 21, 97, 49, AF, 25, B4, 2C, A0, B8, AD, C9, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, B7, 00, 00, 00, 49, 42, 53, 68, 65, 65, 74, 52, 65, 67, 33, 4C, 69, 62, 00, 42, 00, 00, 00, 00, FF, CC, 31, 00, 00, B0, FE, 6F, 19, A0, 78, AE, 41, 9F, DA, 7F, 74, D9, CE, 12, 81, 91, 02, C6, 79, 9F, 37, 0A, 40, BD, 2B, 0A, 6B, 49, 91, E3, BB, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
4.6967

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
32 KB (32,768 bytes)

ActiveX Install
Name:
{F828F867-AFC0-41A0-923A-79F5DD43B0CE}


Scan ibsheet_registration3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.