» يقوم بتحويل اعمالك في برنامج بور بوينت microsoft powerpoint إلى ملفات تنفيذيه بصيغة exe بمعنى انه.ex
Overview
Analysis
File Details

يقوم بتحويل اعمالك في برنامج بور بوينت microsoft powerpoint إلى ملفات تنفيذيه بصيغة exe بمعنى انه.ex

DzSoft Ltd

The program is a setup application that uses the Inno Setup installer.

File name:

Publisher:

DzSoft Ltd (www.dzsoft.com) (signed by DzSoft Ltd)

Description:

PowerPoint Slide Show Converter Setup

Version:

3.1.0.6

MD5:

a320162ff9f35551e74103e029bd5493

SHA-1:

fdf38a5d4ccdd19412a9d58a65e6f794e16b9f6d

SHA-256:

238a0a1b15effe40355be21618c224f53e2da110261b7e5f2fc240b7910a4ea9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/29/2024 9:14:58 AM UTC (today)

File size:

3.2 MB (3,403,944 bytes)

Installer:

Inno Setup

Language:

English (United States)

Digital Signature

Signed by:

DzSoft Ltd

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

10/12/2006 2:00:00 AM

Valid to:

10/13/2007 1:59:59 AM

Subject:

CN=DzSoft Ltd, OU=Secure Application Development, O=DzSoft Ltd, L=Kremenchuk, S=Poltavska Oblast, C=UA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

067D623ED84BDA61A4C37BF43CFBFE9E

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:YmdNEHZ9M+LcR4JGek5YVUHPtDmesud6wiA7:5dNwD9V7+yUvQes7Q

Entry address:

0x98D8

Entry point:

55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, EE, 97, FF, FF, E8, F5, A9, FF, FF, E8, 20, CC, FF, FF, E8, 67, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 82, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 38, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 9F, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8... 
[+]

Entropy:

7.9977

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

36 KB (36,864 bytes)

Scan يقوم بتحويل اعمالك في برنامج بور بوينت microsoft powerpoint إلى ملفات تنفيذيه بصيغة exe بمعنى انه.ex - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.