home

libreriaedinumen.exe.deploy

WinDesktopKiosk

aquafadas

Publisher:
aquafadas  (signed and verified)

Product:
WinDesktopKiosk

Version:
1.0.0.1

MD5:
74436d42f6a4bc2dcc100576621ab9be

SHA-1:
ad861d2c84c9d212fd8d30b8216d9560322f7ecc

SHA-256:
3ec5fc336a564c68a55857dbf64ed7484730b426c45d43ea623b6df90454f577

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 10:48:44 AM UTC  (today)

File size:
782.1 KB (800,824 bytes)

Product version:
1.0.0.1

Copyright:
Copyright Edinumen © 2014

Original file name:
LibreriaEdinumen.exe

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\libreria edinumen\application files\libreriaedinumen_1_0_0_34\libreriaedinumen.exe.deploy

Digital Signature
Signed by:
aquafadas

Authority:
Thawte, Inc.

Valid from:
8/17/2014 9:00:00 PM

Valid to:
8/15/2016 8:59:59 PM

Subject:
CN=aquafadas, OU=34, O=aquafadas, L=Montpellier, S=herault, C=FR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
439FFA7B299F9BE822BD87CBD7A5FD24

File PE Metadata
Compilation timestamp:
3/29/2016 9:32:15 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:zTeKPsYVbShFSqHc7WBPYAjcfcR/PhFw7RA13T+XZtd5BUyCbvqwkG7jBwgjIpc5:zaKPsYVbShFSqHc7CjVR/PhFw7RA13Th

Entry address:
0x69ACE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
415 KB (424,960 bytes)

Scan libreriaedinumen.exe.deploy - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.