home

scmain_tray.exe

ShadowCube - The Real DLP Product.

Duruan Co., Ltd.

Publisher:
Duruan Co., Ltd.  (signed and verified)

Product:
ShadowCube - The Real DLP Product.

Description:
ShadowCube

Version:
5.20.0.20019

MD5:
efb67b9245ba3bc1dbe91fca6d6ae444

SHA-1:
208c558a8a0ff810efe150473d1eb3875987cad0

SHA-256:
69b4ec8e44024c60923ed51f74fbba25f7650eaf0f42afae307dbd0ae770218d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:37:49 AM UTC  (today)

File size:
2.1 MB (2,155,640 bytes)

Product version:
5.20.0.20043

Copyright:
Copyright (C) 2008 Duruan Co, Ltd. All rights reserved.

Trademarks:
ShadowCube(tm)

Original file name:
scmain_tray.exe

File type:
Executable application (Win32 EXE)

Language:
Korean

Common path:
C:\Program Files\duruan\shadowcube\scmain_tray.exe

Digital Signature
Signed by:
Duruan Co., Ltd.

Authority:
Thawte, Inc.

Valid from:
8/27/2012 7:00:00 PM

Valid to:
9/27/2014 6:59:59 PM

Subject:
CN="Duruan Co., Ltd.", O="Duruan Co., Ltd.", L=Guro, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
21C5308E14CDB5D6851C23824A883CB7

File PE Metadata
Compilation timestamp:
7/10/2014 6:08:40 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:vK1n3QC4/XcjmNtvzSlYLf2kpo+Te/nAyO6Ih7z:8n3Ql/XcjmNpGWjoeP

Entry address:
0xD743C

Entry point:
E8, E0, 0B, 00, 00, E9, 4C, FE, FF, FF, FF, 25, 48, D4, 4F, 00, FF, 25, 44, D4, 4F, 00, FF, 25, 40, D4, 4F, 00, 83, 3D, 50, F8, 53, 00, 00, 74, 03, 33, C0, C3, 56, 6A, 04, 6A, 20, FF, 15, B8, D5, 4F, 00, 59, 59, 8B, F0, 56, FF, 15, C8, D0, 4F, 00, A3, 50, F8, 53, 00, A3, 4C, F8, 53, 00, 85, F6, 75, 05, 6A, 18, 58, 5E, C3, 83, 26, 00, 33, C0, 5E, C3, 6A, 14, 68, D8, 7F, 52, 00, E8, A0, 0C, 00, 00, FF, 35, 50, F8, 53, 00, 8B, 35, C4, D0, 4F, 00, FF, D6, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, C0...
 
[+]

Entropy:
6.2675

Code size:
1004.5 KB (1,028,608 bytes)

Scan scmain_tray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.