» timeleft.exe
Overview
Analysis
File Details

timeleft.exe

TimeLeft

NesterSoft Inc.

File name:

timeleft.exe

Publisher:

NesterSoft Inc. (signed and verified)

Product:

TimeLeft

Version:

3.26.0.113

MD5:

ad2a52f35d3be3513e6a4cf675f93890

SHA-1:

bcc072353919963983e56ac92a33f4c82ff013a5

SHA-256:

df6aae72867748a1f7982760a1f14310190f1cb09706747a884fdb1ee3dbf5b9

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

5/6/2024 11:51:58 AM UTC (today)

Scan engine

Detection

Engine version

F-Prot

W32/Heuristic-210

v6.-

Quick Heal

(Suspicious) - DNAScan

6.15.-

File size:

1002.1 KB (1,026,104 bytes)

Product version:

3.26

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

NesterSoft Inc.

Authority:

VeriSign, Inc.

Valid from:

11/15/2006 1:00:00 AM

Valid to:

11/16/2007 12:59:59 AM

Subject:

CN=NesterSoft Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NesterSoft Inc., L=Woodbridge, S=Ontario, C=CA

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

049956E754CFC91F970B330D9CC22D54

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:fyD28SLWHAqJnHThxFLoZKAJ4KE5h362yLtn7MP+h2v0h6Q:f4BHAqJnzF80W4H361toyh6Q

Entry address:

0x1000

Entry point:

68, 01, C0, 75, 00, E8, 01, 00, 00, 00, C3, C3, FB, D1, 36, 74, EF, 5C, 01, 62, 03, 80, A3, 9B, 6A, FB, 88, 27, 48, A7, C6, BC, A2, C9, 18, BF, 0D, ED, 2C, BD, 11, E2, DD, 0D, 78, D1, 6B, 5C, 2E, A1, 97, 49, 40, 78, D2, B4, 58, 6D, 9C, 85, D9, 0D, DF, 41, BE, 86, F9, 3E, 17, BE, C6, 46, 56, 0A, EA, 38, 36, 98, E3, 4A, 57, A7, 89, 33, 49, 58, 8F, ED, 57, C6, 11, 61, 2C, 21, 0C, 08, F9, 7A, 2E, 9F, 21, 51, C1, AD, CD, 8F, CC, 4F, 83, 1D, 61, D3, 43, 8C, 15, DC, B4, E4, 7F, 7B, B6, C5, 0A, A1, 3D, 93, 58, 77... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

2.2 MB (2,309,632 bytes)

Scan timeleft.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.