home

safemode.999

Microsoft

Publisher:
Microsoft  (signed and verified)

MD5:
c21227f2b7cefe6cf351409048f0dcf7

SHA-1:
40b5cbd5d3ab442acf27fcfc78845ec9ed380786

SHA-256:
aba978931f85a24c9f6f55ebba6fc7446a3043333c5e12a9785aa7192a14fa91

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 12:02:24 AM UTC  (today)

File size:
24.7 KB (25,304 bytes)

Common path:
C:\users\{user}\downloads\syncmyride\ea5t-14d546-afb\safemode.999

Digital Signature
Signed by:
Microsoft

Authority:
Microsoft

Valid from:
2/17/2005 1:42:50 PM

Valid to:
12/31/2039 5:59:59 PM

Subject:
CN=Microsoft Test Software Publish Certificate, OU=ABU, O=Microsoft

Issuer:
CN=Microsoft Test Software Publish Certificate, OU=ABU, O=Microsoft

Serial number:
AEB41B385B98D7A84B30E6E060A05474

File PE Metadata
Compilation timestamp:
2/14/2100 6:39:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:

Linker version:
8.0

CTPH (ssdeep):
384:8vCC6LN8qB62tj8gVQXoTKrfXyfhnoDfo/pH40PxOwIxIwzWJ/y2kL0hHKotNnB+:F9tifCxooH40PMwaCI2lHbtNB+

Entry address:
0x5880

Entry point:
70, 40, 2D, E9, 02, 50, A0, E1, 01, 40, A0, E1, 00, 60, A0, E1, 01, 00, 54, E3, 1D, 00, 00, 0B, 05, 20, A0, E1, 04, 10, A0, E1, 06, 00, A0, E1, B6, FF, FF, EB, 70, 40, BD, E8, 1E, FF, 2F, E1, 04, E0, 2D, E5, 00, 30, 92, E5, 01, 00, 13, E3, 03, E0, C3, E3, 04, 30, 92, 15, 08, 20, 92, 15, 00, 10, 83, 10, 00, 30, 62, 12, 01, 30, 03, 10, 01, 30, 43, 10, 00, 00, 83, 10, 0E, 00, 90, E7, 21, 00, 00, EB, 04, E0, 9D, E4, 1E, FF, 2F, E1, 04, E0, 2D, E5, 01, 00, A0, E1, 04, 20, 93, E5, 03, 10, A0, E1, 0C, 20, 92, E5...
 
[+]

Entropy:
5.2039

Code size:
20 KB (20,480 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.