» launch blueestate.exe
Overview
Analysis
File Details

launch blueestate.exe

TODO:

Leap Motion Inc

File name:

Publisher:

TODO: <Company name> (signed by Leap Motion Inc)

Product:

TODO: <Product name>

Description:

TODO: <File description>

Version:

1.0.0.1

MD5:

48f79eb3d63209451d4ffd39f24fa9de

SHA-1:

caa1781dfd21b4147e167ee28fbd8b181cffac53

SHA-256:

bbb8f7584ffe72f9bddea86de5ea19a3361612e63b3f2a18e5335ad30266d6ab

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/5/2024 5:01:08 AM UTC (today)

File size:

3.9 MB (4,044,128 bytes)

Product version:

1.0.0.1

Original file name:

Settings.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\airspaceapps\blueestate\blueestateapp\launch blueestate.exe

Digital Signature

Signed by:

Leap Motion Inc

Authority:

DigiCert Inc

Valid from:

4/13/2014 8:00:00 PM

Valid to:

5/26/2015 8:00:00 AM

Subject:

CN=Leap Motion Inc, O=Leap Motion Inc, L=San Francisco, S=California, C=US

Issuer:

CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0DF9B49B868C4268C57AF7BC4ED165AC

File PE Metadata

Compilation timestamp:

4/17/2015 6:54:22 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:U5G48sT+V4UAXBjYBnjvTrvfxKRV1oHlj9axkxJGvgLfSEcieDY53iqWdmwznK:xRN4jXBjAvJKKExkxJSSd97SK

Entry address:

0x193000

Entry point:

EB, 1C, 47, 21, 92, 9B, 8F, 33, A0, A9, EC, D1, 7F, E8, 7B, 67, BE, B4, 3B, D6, 5A, CB, 61, 94, 47, 1F, 76, 95, 4A, E2, A1, 48, 30, 59, 00, 35, 73, 6C, D3, 02, 05, 00, 30, 59, 00, FF, E0, E8, 63, C1, 6F, C1, F6, 2A, 8F, 10, 7A, 23, D4, 92, D8, E7, 7E, CE, D9, 2D, F9, 0E, 02, 05, 3A, 7A, 1B, 6C, D3, 02, AB, C8, C8, C9, EF, 9D, B9, 6B, 04, 15, F1, AC, 75, 69, 31, 4B, 4D, 5C, C1, C5, 78, A9, 0D, BC, F1, 1D, B9, 35, 33, C0, 50, 50, B8, 24, 60, 79, 00, 50, B8, 41, 61, 79, 00, 2D, 24, 60, 79, 00, C1, E8, 02, 50... 
[+]

Entropy:

7.9935 (probably packed)

Code size:

1.4 MB (1,497,088 bytes)

Scan launch blueestate.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.