home

shutitdown.scr

4neurons .com

Publisher:
4neurons .com  (signed and verified)

MD5:
789273d7836658cde03663abb4e58af5

SHA-1:
855a5e888a0d2eb5c03663aa21ca45f1cced399e

SHA-256:
a7bb1a224806f3e63805c65d4112bd9f3ccbf346ab2c800ba09e18400fc2f8f9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:49:46 PM UTC  (today)

File size:
152.5 KB (156,200 bytes)

Common path:
C:\Windows\System32\shutitdown.scr

Digital Signature
Signed by:
4neurons .com

Authority:
GeoTrust Inc.

Valid from:
10/11/2011 1:38:30 PM

Valid to:
10/26/2012 12:56:13 AM

Subject:
E=certificate@4neurons.com, CN=4neurons .com, OU=Email and phone validated only., OU=Phone Validation - 48 552344820, OU=See Public S/MIME CPS www.geotrust.com/resources/CPS., OU=CPS terms incorporated by reference liability limited.

Issuer:
CN=GeoTrust True Credentials CA 2, O=GeoTrust Inc., C=US

Serial number:
110874

File PE Metadata
Compilation timestamp:
10/17/2012 12:30:15 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:YGVYHus2DhEe7FrddSpSFv8ZEW1sGmXUhYgbU+lJK:iN2NEE80XUhHU+lJK

Entry address:
0x8708

Entry point:
55, 8B, EC, 6A, FF, 68, A0, 33, 41, 00, 68, 50, 88, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 80, 31, 41, 00, 33, D2, 8A, D4, 89, 15, 3C, 84, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 38, 84, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 34, 84, 41, 00, C1, E8, 10, A3, 30, 84, 41, 00, 33, F6, 56, E8, AA, 34, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 3C, 2C, 00, 00, FF, 15, 70, 31, 41, 00, A3, B4, 99, 41, 00, E8...
 
[+]

Entropy:
6.0009

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
72 KB (73,728 bytes)

Scan shutitdown.scr - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.