home

MrJobs.exe

Mr.Jobs

Systemberatung Schommer Inh. Gregor Schommer

This file is installed with the program Phase 5 HTML-Editor.
Publisher:
Systemberatung Schommer Inh. Gregor Schommer  (signed and verified)

Product:
Mr.Jobs

Description:
Tool zur Dateisuchn

Version:
1.0.0.0

MD5:
645294637405060275d6410bd79cf635

SHA-1:
b8a0297992e28ee208d97f866c8a4a4fee2edd6e

SHA-256:
4f55fc180d5ed0032b7781eadaa2cf2faba3002abe1ce81f590cd047bd33edd9

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/25/2024 12:26:10 AM UTC  (today)

Scan engine
Detection
Engine version

Quick Heal
(Suspicious) - DNAScan
1.15.-

Vba32 AntiVirus
suspected of Backdoor.XiaoBird.70
15.01.19

File size:
534.8 KB (547,640 bytes)

Product version:
1

Copyright:
Hans-Dieter Berretz

Original file name:
MrJobs.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\phase5\mrjobs.exe

Digital Signature
Signed by:
Systemberatung Schommer Inh. Gregor Schommer

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/16/2008 9:28:17 PM

Valid to:
5/16/2009 9:28:17 PM

Subject:
CN=Systemberatung Schommer Inh. Gregor Schommer, OU=Secure Application Development, O=Systemberatung Schommer Inh. Gregor Schommer, L=Koenigswinter, S=NRW, C=DE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
2CBDA63B70FD9B4F50F485D18663F3B9

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:ZqKY2K92BTAJOKVE02NXQo8hQAQJwGFe2oM8Eypq:ZF42dLIfo8hQAQJZeIln

Entry address:
0x1000

Entry point:
B8, 9C, E5, 5D, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 13, 5F, AC, 93, F6, DA, 0E, 4A, 3E, 62, 1D, 64, 84, 49, A8, 0C, 99, B2, F5, 69, 35, D4, 52, AF, E7, 82, B9, EB, DF, 2D, 1B, DD, 5F, 55, ED, BE, 51, CB, BA, 79, 06, CE, B9, 06, C3, 57, 03, D8, 92, 66, 83, 3E, 63, CF, BF, AD, A3, E9, EF, F3, 52, AE, 0A, A5, DF, 59, 93, 9E, CE, E4, D8, D0, 15, 4F, 3E, 32, F6, F9, 2A, 83, D0, 95, A4, 50, B5, 67, D6, DD, 48, 2C, 15, 57, 27...
 
[+]

Packer / compiler:
PECompact v2

Code size:
1.1 MB (1,151,488 bytes)

The file MrJobs.exe has been discovered within the following program.

Phase 5 HTML-Editor  by Systemberatung Schommer
Publisher's description - “Some features of the html editor are: Project management, tag completion for HTML commands, syntax coloring to improve readability, html forms, built-in image viewer, syntax debugger umlaut conversion, Einrückassistent, project-wide text replacement, custom menus and templates supports popular formats such as PHP, JavaScript, HTML, VBScript, Java, Pearl, File Manager to quickly switch between your documents, edit multiple documents simultaneously, Table Wizard, etc.”
www.phase5.info
About 2% of users remove it
 
Powered by Should I Remove It?

Scan MrJobs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.