» paburntools.exe
Overview
Analysis
File Details
Behaviors (1)

paburntools.exe

PowerArchiver Burner 2015

ConeXware, Inc

File name:

paburntools.exe

Publisher:

ConeXware, Inc. (signed by ConeXware, Inc)

Product:

PowerArchiver Burner 2015

Version:

2.0.7.1

MD5:

d88a9dd8c84db37dc93bc481cb8acf57

SHA-1:

4372f4cda70e031c58d4c7a037687d1c1b93a8cb

SHA-256:

998cfc7ba7a61254d77863aea512f4242e562c629e72ebe6739350850d2b4905

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 1:07:25 AM UTC (today)

File size:

8.5 MB (8,873,472 bytes)

Product version:

2.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\powerarchiver\paburntools.exe

Digital Signature

Signed by:

ConeXware, Inc

Authority:

VeriSign, Inc.

Valid from:

8/18/2013 5:30:00 AM

Valid to:

11/17/2016 5:29:59 AM

Subject:

CN="ConeXware, Inc", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="ConeXware, Inc", L=Reston, S=Virginia, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3414D4E2AB75A0FD628D84C24700B76F

File PE Metadata

Compilation timestamp:

11/14/2014 7:47:50 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:wN0jAbQM7SwJuYunYWXz8P4W+F3FVhOjSJcgVLw5wRaPxnz8p1tdzQMdFNMWXZ:wkXnnYATnhOj67awRaPBz8p1td8MdzhZ

Entry address:

0x7F9896

Entry point:

E8, 35, 5E, FE, FF, 60, 8D, 64, 24, 20, 0F, 85, 2E, 73, FF, FF, E8, E7, 5E, FE, FF, 0A, D2, 62, F8, 89, BD, 98, 4D, 40, 02, 17, A1, AA, B8, BE, 2E, F1, B9, 35, C3, D4, 84, 89, 4F, 4A, 18, 0D, 99, 84, 02, 2F, A5, 8A, 0E, F2, E2, E7, D5, 0A, 2D, F0, F2, 03, 9F, 8E, 1A, C6, DC, D5, 0F, 79, 87, 3B, 50, DE, A5, 67, 09, A2, F3, 7F, A1, F1, 67, F4, 4E, 27, 2F, 54, CA, A0, 44, 6C, C5, 4D, 0A, 00, CC, 05, 5E, B9, AD, 61, 68, C0, B8, D2, C9, 6E, 22, C4, B3, 62, C8, C5, E4, A7, 2F, 8B, EB, 48, 33, 9A, 95, B7, 84, 1B... 
[+]

Entropy:

6.7213

Code size:

5.7 MB (5,982,208 bytes)

Autoplay Handler

Display name:

PABurner

Scan paburntools.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.