labtechupdate.exe

7-Zip

LabTech Software

Publisher:
Igor Pavlov  (signed by LabTech Software)

Product:
7-Zip

Description:
7z SFX (Console version)

Version:
3, 12, 0, 0

MD5:
d9a4622c027cd5d3a68e7c48f9fb7762

SHA-1:
6a6ee81809c07050471c1ddf9ad604ae6f84d06d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 1:54:18 PM UTC  (today)

File size:
186.2 KB (190,696 bytes)

Product version:
3, 12, 0, 0

Copyright:
Copyright (C) 1999-2003 Igor Pavlov

Original file name:
7zCon.sfx

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\temp\_ltupdate\labtechupdate.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
3/23/2011 7:00:00 PM

Valid to:
3/23/2014 6:59:59 PM

Subject:
CN=LabTech Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=LabTech Software, L=Tampa, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
16D4D711F93CBB86F09D425D04A5D0DE

File PE Metadata
Compilation timestamp:
12/9/2003 1:17:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

CTPH (ssdeep):
3072:PFyxM2wcqlOe6TlQtTfuo1aQlFQDuOMu3ByE7lgX+TaeSWcpPaX0t:PFAtwFgeVfsQl4uOZAEeOmeSWAPaE

Entry address:
0x16FAA

Entry point:
55, 8B, EC, 6A, FF, 68, 78, F8, 41, 00, 68, 60, 7C, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 10, 53, 56, 57, 89, 65, E8, FF, 15, 10, F1, 41, 00, 33, D2, 8A, D4, 89, 15, 2C, 7E, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 28, 7E, 42, 00, C1, E1, 08, 03, CA, 89, 0D, 24, 7E, 42, 00, C1, E8, 10, A3, 20, 7E, 42, 00, 6A, 01, E8, FD, 13, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, AB, 00, 00, 00, 59, E8, 32, 09, 00, 00, 85, C0, 75, 08, 6A, 10, E8, 9A, 00, 00, 00, 59, 83, 65, FC, 00...
 
[+]

Entropy:
6.5836

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
117 KB (119,808 bytes)

Scan labtechupdate.exe - Powered by Reason Core Security