» lvl2.exe
Overview
Analysis
File Details

lvl2.exe

Cornelsen Verlag GmbH & Co. OHG

File name:

lvl2.exe

Publisher:

Cornelsen Verlag (signed by Cornelsen Verlag GmbH & Co. OHG)

Version:

2.0.0.267

MD5:

5660a855f2413fb9055bf6222a6bcde4

SHA-1:

03973b9c742d0f3b1ec282ad738f25f8891a71cf

SHA-256:

dea8e445d1667c7ab2cf3ec838ddb915fee1262794fdf83c6a9aaa4f763d6b8b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 4:22:09 AM UTC (today)

File size:

1023.8 KB (1,048,360 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

German (Germany)

Digital Signature

Signed by:

Cornelsen Verlag GmbH & Co. OHG

Authority:

VeriSign, Inc.

Valid from:

7/13/2007 2:00:00 AM

Valid to:

7/14/2010 1:59:59 AM

Subject:

CN=Cornelsen Verlag GmbH & Co. OHG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Cornelsen Verlag GmbH & Co. OHG, L=Berlin, S=Berlin, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

462C1CE680C27FD6F647948F7566F39A

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:dBhHD5filCr/ATLNMDP3DNJYmab8W30XqLBwGZWHXg4e0Yt4QxuMJdVI:d3NiksNETch930Kw73goO4Qx1K

Entry address:

0x6CA78

Entry point:

55, 8B, EC, 83, C4, F0, B8, 40, C8, 46, 00, E8, 3C, 98, F9, FF, 6A, 00, 68, 10, CB, 46, 00, E8, 30, A0, F9, FF, 85, C0, 75, 71, 6A, 00, 68, 1C, CB, 46, 00, E8, 20, A0, F9, FF, 85, C0, 75, 61, E8, 0F, E3, FF, FF, 84, C0, 74, 58, E8, AA, E6, FF, FF, 84, C0, 74, 4F, E8, AD, E0, FF, FF, 84, C0, 75, 05, E8, 10, E2, FF, FF, A1, F8, E9, 46, 00, 8B, 00, E8, 3C, 5A, FE, FF, A1, F8, E9, 46, 00, 8B, 00, BA, 38, CB, 46, 00, E8, 13, 56, FE, FF, 8B, 0D, 5C, E9, 46, 00, A1, F8, E9, 46, 00, 8B, 00, 8B, 15, D0, C2, 46, 00... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

431 KB (441,344 bytes)

Scan lvl2.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.