» tevii_shell.exe
Overview
Analysis
File Details

tevii_shell.exe

JacTek Multimedia Co., Ltd

File name:

tevii_shell.exe

Publisher:

JacTek Multimedia Co., Ltd (signed and verified)

MD5:

7cb042cc3ebda4c0615456ad5ae6593f

SHA-1:

0f12269e0b3ea245615462888b65d095aec8c29d

SHA-256:

48e725a0f42ceb8db2a23a81d95d0b73a2ae45ceba062eb32df24f3b25c7d69a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 5:56:19 AM UTC (today)

File size:

63.6 KB (65,104 bytes)

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

JacTek Multimedia Co., Ltd

Authority:

GlobalSign nv-sa

Valid from:

10/19/2011 1:32:01 PM

Valid to:

10/19/2014 1:32:01 PM

Subject:

CN="JacTek Multimedia Co., Ltd", O="JacTek Multimedia Co., Ltd", L=New Taipei City, S=Taiwan, C=TW

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121300E6C00E3AEBD1741A5AF5425A9DA4E

File PE Metadata

Compilation timestamp:

3/12/2012 6:26:00 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

768:D9I1PlIm5LnYzovhX7PndZjvs9e2P9lxc+fN6FtJ56RBsEKVgROiM:D9IxLYzov1ndBM7P9xWARBsHviM

Entry address:

0x172E

Entry point:

E8, 69, 17, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 78, AD, 40, 00, 89, 0D, 74, AD, 40, 00, 89, 15, 70, AD, 40, 00, 89, 1D, 6C, AD, 40, 00, 89, 35, 68, AD, 40, 00, 89, 3D, 64, AD, 40, 00, 66, 8C, 15, 90, AD, 40, 00, 66, 8C, 0D, 84, AD, 40, 00, 66, 8C, 1D, 60, AD, 40, 00, 66, 8C, 05, 5C, AD, 40, 00, 66, 8C, 25, 58, AD, 40, 00, 66, 8C, 2D, 54, AD, 40, 00, 9C, 8F, 05, 88, AD, 40, 00, 8B, 45, 00, A3, 7C, AD, 40, 00, 8B, 45, 04, A3, 80, AD, 40, 00, 8D, 45, 08, A3, 8C, AD, 40... 
[+]

Entropy:

6.2457

Code size:

25.5 KB (26,112 bytes)

Scan tevii_shell.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.