home

sblogon.exe

IS-Builder

DIRECTUM

Publisher:
NPO "Computer"  (signed by DIRECTUM)

Product:
IS-Builder

Version:
7.16.0.1913

MD5:
49491d5922a4494627cbc2d7d0ca1e88

SHA-1:
9ae23639af8dca1f1a1bd8d2d70290f7ef06da7e

SHA-256:
ce00e1169676630be85e352d11711821b74a6c2cc69fe5926c56ec7184f19305

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 12:44:15 PM UTC  (today)

File size:
7 MB (7,340,728 bytes)

Product version:
7.16.0

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\common files\npo computer shared\is-builder\sblogon.exe

Digital Signature
Signed by:
DIRECTUM

Authority:
thawte, Inc.

Valid from:
5/23/2016 5:00:00 AM

Valid to:
5/24/2017 4:59:59 AM

Subject:
CN=DIRECTUM, OU=OTO, O=DIRECTUM, L=Izhevsk, S=Izhevsk, C=RU

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
294D9B3B5AF8EF441DCAD1D0E3C74DA5

File PE Metadata
Compilation timestamp:
7/20/2016 12:53:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:oTc3mZvTnb38kQ7NsYLgyqCoFHfnmNyLxHMu1lxBg/UUAccfARb2DcldO5GCAI9S:0cI7nb38CFkcls/55c6k5MQZUmH8uOLN

Entry address:
0x488774

Entry point:
55, 8B, EC, 83, C4, F0, B8, 04, EF, 87, 00, E8, 14, 8F, B7, FF, A1, B8, C9, 89, 00, 8B, 00, E8, 3C, ED, B7, FF, A1, B8, C9, 89, 00, 8B, 00, C6, 40, 6F, 00, 8B, 0D, D0, 26, 89, 00, A1, B8, C9, 89, 00, 8B, 00, 8B, 15, 70, C7, 43, 00, E8, 21, ED, B7, FF, A1, B8, C9, 89, 00, 8B, 00, E8, 1D, ED, B7, FF, A1, C8, D2, 89, 00, E8, 97, 2D, BB, FF, E8, 5A, 8A, B7, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
4.5 MB (4,746,240 bytes)

Scan sblogon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.