home

tkpdf32.exe

Realty Tools, Incorporated

Publisher:
Realty Tools, Incorporated  (signed and verified)

MD5:
fbd5f32abef863017c380f509abb4284

SHA-1:
f13f0576cde12aa3e7dc2a2f858245cf306bccff

SHA-256:
ecde58de06e3a8cdc161422a9631977afd9148911e2674d039516f4521801408

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 3:31:37 PM UTC  (today)

File size:
279.4 KB (286,128 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\toolkitcma\bin\tkpdf32.exe

Digital Signature
Signed by:
Realty Tools, Incorporated

Authority:
VeriSign, Inc.

Valid from:
7/12/2009 8:00:00 PM

Valid to:
9/7/2012 7:59:59 PM

Subject:
CN="Realty Tools, Incorporated", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Realty Tools, Incorporated", L=Hunt Valley, S=Maryland, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
579DBC523652124E138F49031CA062D8

File PE Metadata
Compilation timestamp:
9/24/2070 4:40:22 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:Xcx133yEzS3mbWHC4YPUgalMXUCAOwMbt3ePCFPjsbknQ0PBPW9RXXf5fW+6WpZ1:sx93l8iWHfYc7lMXUjMbtHF7279y+71

Entry address:
0x1000

Entry point:
A1, 5A, 40, 43, 00, C1, E0, 02, A3, 5E, 40, 43, 00, 57, 51, 33, C0, BF, C8, DE, 43, 00, B9, C4, 07, 44, 00, 3B, CF, 76, 05, 2B, CF, FC, F3, AA, 59, 5F, 64, 67, 8B, 16, 04, 00, 89, 15, 6E, 40, 43, 00, 8B, 42, F8, A3, 66, 40, 43, 00, 8B, 42, FC, A3, 6A, 40, 43, 00, 83, EA, 04, 89, 15, 08, 05, 44, 00, 83, EA, 04, 3B, D4, 73, 02, 8B, E2, 6A, 00, E8, 8F, A3, 02, 00, 59, 68, 2C, 40, 43, 00, 6A, 00, E8, 44, 1F, 03, 00, A3, 62, 40, 43, 00, 6A, 00, E9, 8C, 0F, 03, 00, E9, 53, A4, 02, 00, 00, 00, 00, 55, 8B, EC, 81...
 
[+]

Entropy:
6.3917

Code size:
201.5 KB (206,336 bytes)

Scan tkpdf32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.