» screen snapshot.exe
Overview
Analysis
File Details

screen snapshot.exe

Baidu Japan

File name:

screen snapshot.exe

Publisher:

Baidu Japan (signed and verified)

MD5:

c8132ad980f78014a62c6b2b31d85b7d

SHA-1:

0f9b5f96768b1a64218577ea492db6f2b4de8f8b

SHA-256:

cf248f8ffd02f35c904fa8ed59cab8dbac6af6ad46e9464987a5358b94a5ae06

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 9:54:54 PM UTC (today)

File size:

631.1 KB (646,248 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\baidu\ime\2.1.0.22\screen snapshot.exe

Digital Signature

Signed by:

Baidu Japan

Authority:

GlobalSign nv-sa

Valid from:

12/21/2010 12:29:23 PM

Valid to:

12/22/2011 12:29:19 PM

Subject:

E=motohiro_satou@baidu.com, CN=Baidu Japan, OU=Roppongi, O=Baidu Japan, L=Minatoku, S=Tokyo, C=JP

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012D072A7109

File PE Metadata

Compilation timestamp:

7/21/2011 3:05:51 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:deqRzRKWe2Aqxi8ANUbgZR18Fxdt0+zXZMf7e:dvR1JeyiUm1CxBef7e

Entry address:

0x46D1F

Entry point:

E8, DC, 65, 00, 00, E9, 79, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, D0, AD, 46, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, D0, AD, 46, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, 38, C6, 46, 00... 
[+]

Entropy:

5.7971

Code size:

341.5 KB (349,696 bytes)

Scan screen snapshot.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.