home

iocaa687f3c-dd25-e74d-a586-7201e3987981.exe

Robert Dwyer

Publisher:
Gunner Inc.  (signed by Robert Dwyer)

Description:
0bfuscated Email Link Creator

Version:
1.0.4

MD5:
d9f008604dfe6e61575eae37a8e07e81

SHA-1:
574df5f2b3969615d75762e560dc610da2498152

SHA-256:
89aacbdc3d6388ad18d8d1db752b0ddfd676bff01f94ba1b7df3d8469e4df5e4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:27:47 AM UTC  (today)

File size:
14 KB (14,312 bytes)

Product version:
1.0.4

Copyright:
Copyright ©1999-2003 Robert Dwyer

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\temp\iocaa687f3c-dd25-e74d-a586-7201e3987981.exe

Digital Signature
Signed by:
Robert Dwyer

Authority:
GlobalSign nv-sa

Valid from:
8/19/2011 3:34:50 PM

Valid to:
8/19/2014 3:34:50 PM

Subject:
CN=Robert Dwyer, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11213D17299DA8730FFF208C06BD12CB6485

File PE Metadata
Compilation timestamp:
5/12/2003 6:12:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
192:tRjd84pp3oJpZfAVDSYgaNR1XtQoLKj3vu88TgBxe1HCjm+3il01KBSnB:t5dhTbVXfR1X2oLKTm8pK5+SYIS

Entry address:
0x11A0

Entry point:
6A, 00, E8, AF, 0A, 00, 00, A3, D0, 1D, 40, 00, E8, 06, 00, 00, 00, 50, E8, 99, 0A, 00, 00, 55, 8B, EC, 81, C4, 78, FF, FF, FF, E8, 97, 0A, 00, 00, A3, E8, 1D, 40, 00, 6A, 00, 6A, 3C, 8D, 85, 78, FF, FF, FF, 50, E8, A6, 0B, 00, 00, C7, 85, 78, FF, FF, FF, F4, FF, FF, FF, C7, 45, 88, 90, 01, 00, 00, 68, E1, 10, 40, 00, 8D, 45, 94, 50, E8, 27, 0B, 00, 00, 8D, 85, 78, FF, FF, FF, 50, E8, CF, 0A, 00, 00, A3, D8, 1D, 40, 00, C7, 45, D0, 30, 00, 00, 00, C7, 45, D4, 03, 00, 00, 00, C7, 45, D8, 13, 13, 40, 00, C7...
 
[+]

Packer / compiler:
TASM / MASM

Code size:
4.5 KB (4,608 bytes)

The file iocaa687f3c-dd25-e74d-a586-7201e3987981.exe has been discovered within the following program.

Types  by Evgeny Strunnikov
Publisher's description - “Types allows you to customize the way Windows handles different file types: set program associations, change icons, context menus and other properties.”
izt.name/apps/types
18% remove it
 
Powered by Should I Remove It?

Scan iocaa687f3c-dd25-e74d-a586-7201e3987981.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.