home

ifobsclient.exe

CS Integra ltd

Publisher:
CS LTD  (signed by CS Integra ltd)

Version:
2.1.6.40

MD5:
ab944757ea4eb598d1be066418b3f2e9

SHA-1:
501b335fa8d1ca771c5f5857f7898fb842195299

SHA-256:
05e022c6cca77cfe361a83d461552346d5c164d5a26811a3a63a78636886bb2f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 5:50:08 PM UTC  (today)

File size:
3.2 MB (3,363,664 bytes)

Product version:
2.1.6

Copyright:
(c) CS Ltd, 2003-2013

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ifobs\win32 client2\325213\ifobsclient.exe

Digital Signature
Signed by:
CS Integra ltd

Authority:
Thawte, Inc.

Valid from:
1/22/2014 2:00:00 AM

Valid to:
1/23/2016 1:59:59 AM

Subject:
CN=CS Integra ltd, O=CS Integra ltd, L=Kharkov, S=Kharkov, C=UA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
449BB669A3B617A7405759BC55219932

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:HyUDh+HjynarqXQoZ2A3CDvzd2iLPntWe4Pm2yKK2D6aH3/OxT3ZDpiVPhQYs6ty:H1xaWXQMsUPOxT

Entry address:
0x184898

Entry point:
55, 8B, EC, 83, C4, F0, B8, 30, 2A, 58, 00, E8, 24, CB, E7, FF, 68, 22, 04, 00, 00, E8, 4E, CD, E7, FF, E8, 81, 15, EB, FF, 84, C0, 0F, 84, EC, 03, 00, 00, 33, C0, 55, 68, 47, 49, 58, 00, 64, FF, 30, 64, 89, 20, A1, 90, 0A, 59, 00, 8B, 00, E8, 4F, E4, E7, FF, E8, 4A, F2, EA, FF, B2, 01, 8B, 08, FF, 51, 14, E8, 3E, F2, EA, FF, E8, 91, F2, EA, FF, 84, C0, 74, 0A, A1, 8C, 86, 49, 00, E8, 87, 44, F1, FF, 8B, 0D, 0C, 3C, 59, 00, A1, 90, 0A, 59, 00, 8B, 00, 8B, 15, 10, 3C, 59, 00, E8, 1B, E4, E7, FF, 8B, 0D, B0...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.5 MB (1,588,736 bytes)

Scan ifobsclient.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.