home

Kami.exe

紙copi Lite

YMIRLINK Inc.

Publisher:
YMIRLINK Inc.  (signed and verified)

Product:
紙copi Lite

Version:
2.91

MD5:
6a518153576e258fbc7a2815f1858b58

SHA-1:
7174d1f4864228393e6638b41c46ff59563ad610

SHA-256:
af93b456f97e4c3a363a8c3298a37579828c999a8657992f7b75cd7d922c6d9e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 5:42:41 AM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Backdoor.Win32.Simda
t3scan.1.8.3.0

File size:
2.8 MB (2,884,224 bytes)

Product version:
2.91

Copyright:
Copyright YMIRLINK Inc. and Isshu Rakusai, 2000-2009

Original file name:
Kami.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\kami\kami.exe

Digital Signature
Signed by:
YMIRLINK Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
4/1/2008 3:49:08 PM

Valid to:
3/30/2010 8:50:38 PM

Subject:
CN=YMIRLINK Inc., OU="", O=YMIRLINK Inc., L=Shibuya, S=Tokyo, C=JP

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
29BDF1053BCBB383BBABBD19D9EFC6D9

File PE Metadata
Compilation timestamp:
10/9/2009 4:17:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:TfPdjTFGIRBFZ4TVhdmr6ms7pOyVGQz+kXM33EjhvLMnQhC:TxQIjesCvz+kXMnm4nQA

Entry address:
0xF1390

Entry point:
E9, 10, 9B, 19, 00, E9, 0D, 5A, 1D, 00, E9, 0C, 03, 16, 00, E9, 4B, ED, 14, 00, E9, 29, 90, 18, 00, E9, 98, 14, 17, 00, E9, 28, 34, 14, 00, E9, 88, A2, 12, 00, E9, 43, E0, 01, 00, E9, 45, DC, 1C, 00, E9, FC, CE, 14, 00, E9, 34, 3D, 0A, 00, E9, CF, DD, 08, 00, E9, 5C, EE, 13, 00, E9, 15, F3, 03, 00, E9, E4, 65, 1D, 00, E9, 2D, F3, 1A, 00, E9, 55, 52, 16, 00, E9, 6E, 55, 15, 00, E9, 4C, BB, 09, 00, E9, 37, 0A, 02, 00, E9, 23, DC, 1C, 00, E9, 88, 6A, 1B, 00, E9, E5, B1, 17, 00, E9, 73, F6, 03, 00, E9, 41, 17...
 
[+]

Entropy:
5.8601

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
2 MB (2,060,288 bytes)

Scan Kami.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.