home

start.exe

untitled

Intuit, Inc.

Publisher:
Intuit, Inc.  (signed and verified)

Product:
untitled

Version:
0.0.0.0

MD5:
c9b5f75c6b4d823f077e0c4cfb235b10

SHA-1:
8c0ee4744d05cd0a0a9d001c5acd1e18ba3088ed

SHA-256:
ca91ad6e0f2cf96cb3ecb4428fe370e20e0d973a2988f4e18dc789e460c81a3c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 1:29:32 PM UTC  (today)

File size:
4.4 MB (4,615,928 bytes)

Product version:
0.0.0.0

Original file name:
payroll.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Intuit, Inc.

Authority:
VeriSign, Inc.

Valid from:
3/9/2010 7:00:00 PM

Valid to:
3/9/2012 6:59:59 PM

Subject:
CN="Intuit, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Intuit, Inc.", L=Mountain View, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
20D256ACC022D1694BD65F60514B4D99

File PE Metadata
Compilation timestamp:
5/4/2009 11:13:21 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:ai+ySL1QdeA0w0acl//NNtLLnnkwiS5zD8PiNIvUi+otMGG:JnjW//NLnThNIvUiza

Entry address:
0x1B6253

Entry point:
E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, 2B, 4F, 4D, CA, 2D, 52, 73, 47, 4A, 2E, 1C, 07, 61, 3B, D8, 20, 3D, 19, AC, E3, AD, 23, BB, 8F, 13, 28, E4, 62, EA, 5E, 04, F2, 8D, 4C, 22, BC, 2D, 36, CA, 45, C8, FE, D3, 04, 7D, 06, C8, C1, E1, E5, 0E, 92, B4, A4, 67, 24, E1, E5, 0E, 92, B4, A4, 67, 24, E9, C9, 4B, 00, 00, E9, DD, 4B, 00, 00, E9, D8, 4B, 00, 00, E8, 5E, FB, FF, FF, 4E, DD, 00, 00, 43, 8F, 00, 00, 73, 59, 7A, 07, B8, A4, 41, C3, 3B, F2, D4, BC, 51, 9D, 71, 30, F1, 85, 70, 33, B7, 48, 49, CF, 8C...
 
[+]

Entropy:
7.8910

Packer / compiler:
MoleBox v2.0

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.