» thilmera7.exe
Overview
Analysis
File Details

thilmera7.exe

thilmera 7

Gakuto Matsumura

File name:

thilmera7.exe

Publisher:

sPherTia (signed by Gakuto Matsumura)

Product:

thilmera 7

Description:

performance monitoring tool "thilmera"

Version:

N/A

MD5:

72a10f587d7aee700d7d1e9c6156b3a9

SHA-1:

86ed7cef317cf5534b6d078cf99a1e735dbe4467

SHA-256:

48084c1cd89da490a0a01afe8d82e29c837843db5388a172604d6e1a3dc02629

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 9:10:18 PM UTC (today)

File size:

768.5 KB (786,904 bytes)

Product version:

0b110

Original file name:

thilmera7.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\thilmera7.exe

Digital Signature

Signed by:

Gakuto Matsumura

Authority:

GlobalSign nv-sa

Valid from:

1/21/2014 6:07:20 PM

Valid to:

5/2/2016 6:29:33 PM

Subject:

CN=Gakuto Matsumura, C=JP

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121A7D9E8601AC749F90D2563CEC7DB3EBB

File PE Metadata

Compilation timestamp:

4/10/2014 6:48:24 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:BXN2sQGqY+AMp3UdQs8eQ/4WCLbPiS329MvF:Bd2sQGqHAA3ts8eQgLLbPiS9vF

Entry address:

0x496AF

Entry point:

E8, 85, CD, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, 2C, 74, 29, 01, 5D, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, BC, 4E, 49, 00, 33, C5, 89, 45, FC, 83, A5, D8, FC, FF, FF, 00, 53, 6A, 4C, 8D, 85, DC, FC, FF, FF, 6A, 00, 50, E8, 9B, C5, FF, FF, 8D, 85, D8, FC, FF, FF, 89, 85, 28, FD, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, 2C, FD, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89... 
[+]

Entropy:

6.5778

Code size:

511.5 KB (523,776 bytes)

Scan thilmera7.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.