home

ipdivawingzip.exe

Gzip

IPdiva

Publisher:
GnuWin32 <http://gnuwin32.sourceforge.net>  (signed by IPdiva)

Product:
Gzip

Description:
Gzip: compress files

Version:
1.3.12.2844

MD5:
8b4f406c06ba0645e0320a327c08e3bb

SHA-1:
4b7b69142a12970e42fb2017a18fd938a2bdd98f

SHA-256:
8e2531036dcaf926236ea1f6054647ecec0a870174322595365d9b8cd2ee31b2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 3:15:32 AM UTC  (today)

File size:
72.1 KB (73,800 bytes)

Product version:
1.3.12.2844

Copyright:
© 2007 Free Software Foundation <www.fsf.org>

Trademarks:
GnuWin32®, Gzip®, gzip®

Original file name:
gzip.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\virtualized\c\users\fil\ipdiva\applications\ipdivawingzip.exe

Digital Signature
Signed by:
IPdiva

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/31/2009 11:49:46 AM

Valid to:
3/31/2011 11:49:46 AM

Subject:
CN=IPdiva, OU=Provided by TBS INTERNET http://www.tbs-certificats.com/, OU=Secure Application Development, O=IPdiva, L=CESSON SEVIGNE, S=Ille et Vilaine, C=FR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
2D339DE7E41B1F7352885ADFF6868BE5

File PE Metadata
Compilation timestamp:
10/15/2007 3:59:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
1536:BP10hPasgezHhCqnSTGeuGmhOHxMH1Pn4A:xcgk/yMgxE1Pnd

Entry address:
0x1280

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 01, 00, 00, 00, FF, 15, 8C, 31, 46, 00, E8, B8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 8C, 31, 46, 00, E8, 98, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, F8, 31, 46, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, D4, 31, 46, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 8B, 44, 24, 04, A3, 10, 10, 41, 00, 40, 66, C7, 05, 20, 10, 41, 00, 00, 00, C7, 05, 30, 10, 41, 00, 00, 00, 00, 00, 74, 0A, C7...
 
[+]

Packer / compiler:
MingWin32 - Dev C++ v4.x (h)

Code size:
51 KB (52,224 bytes)

Scan ipdivawingzip.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.