home

res.exe

KumgaCompanyCA

Publisher:
KumgaCompanyCA  (signed and verified)

MD5:
07f594db179a24a875e070e48c35612c

SHA-1:
00567e63957c187c03e8ee7e50c23220ca9b5403

SHA-256:
8a4b8eff31b0070712d28ff4963119c42ab171a8e497cdbb4f20886318dc7abe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 4:17:00 AM UTC  (today)

File size:
806.2 KB (825,520 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\temp\res.exe

Digital Signature
Signed by:
KumgaCompanyCA

Authority:
ComodoCA

Valid from:
8/14/2011 4:46:37 PM

Valid to:
1/1/2040 3:59:59 AM

Subject:
CN=KumgaCompanyCA

Issuer:
CN=ComodoCA

Serial number:
2E69C3CA2FA8AF804578E96B51D1BD10

File PE Metadata
Compilation timestamp:
6/20/1992 2:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:CS9wlTzi2gQO1PMV2DCHAJ2glv9fJVOYfJSzaSA5bo:p9ijgQO1PMDozYApo

Entry address:
0xB90AC

Entry point:
55, 8B, EC, 83, C4, F0, 33, C0, 89, 45, F0, B8, C4, 8E, 4B, 00, E8, 87, C6, F4, FF, 33, C0, 55, 68, BC, 91, 4B, 00, 64, FF, 30, 64, 89, 20, A1, C0, C3, 4B, 00, 8B, 00, E8, 91, 99, F7, FF, A1, C0, C3, 4B, 00, 8B, 00, BA, D0, 91, 4B, 00, E8, 98, 96, F7, FF, A1, C0, C3, 4B, 00, 8B, 00, C6, 40, 3F, 00, 8B, 0D, 34, C2, 4B, 00, A1, C0, C3, 4B, 00, 8B, 00, 8B, 15, C4, B5, 4A, 00, E8, 75, 99, F7, FF, E8, FC, 96, F4, FF, 48, 7E, 78, 8D, 55, F0, B8, 01, 00, 00, 00, E8, 4C, 97, F4, FF, 8B, 45, F0, 80, 38, 2D, 75, 63...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
736.5 KB (754,176 bytes)

Scan res.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.