home

tmp000a338b

BANK2

Winman Software Private Limited

Publisher:
Ca  (signed by Winman Software Private Limited)

Product:
BANK2

Version:
1.00

MD5:
006f8c06f630997bc479e86ba0e94d47

SHA-1:
307344bf0b82a23868818283a102099fae62eb7a

SHA-256:
50479318405fe43baa284ad0a3cde64f11bdba6811f972441a142e72338f62b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 6:03:46 PM UTC  (today)

File size:
67 KB (68,616 bytes)

Product version:
1.00

Original file name:
BankCode.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\tmp000a338b

Digital Signature
Signed by:
Winman Software Private Limited

Authority:
India PKI

Valid from:
3/16/2010 10:42:43 AM

Valid to:
3/16/2011 10:42:43 AM

Subject:
CN=Winman Software Private Limited, E=krishna@winmansoftware.com, OU=Class 3 Certificate, OU=Software Development, OU=Company, OU=TCS-CA - Registration Authority, O=Winman Software Private Limited, L=PVS Centenary Building Mangalore, S=Karnataka, C=IN

Issuer:
S=AP, E=admin@tcs-ca.tcs.co.in, L=Hyderabad, CN=Tata Consultancy Services Certifying Authority, OU=TCS CA, O=India PKI, C=IN

Serial number:
307B07B00F9880F76AE2

File PE Metadata
Compilation timestamp:
5/8/2007 10:10:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:FbiTYDXaSU1cmb0BMJP9j+0I7+nELyDL1uK1NkTpQOgzS1D4Tv:9ikTa31PRXjulLyDL1Xq6S107

Entry address:
0x15CC

Entry point:
68, 00, 2F, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, DD, 5B, BA, 59, 85, FA, 8C, 40, A2, 6A, FD, 1C, 88, 79, 5F, 07, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 42, 61, 6E, 6B, 43, 6F, 50, 72, 6F, 6A, 65, 63, 74, 31, 00, 6C, 69, 65, 6E, 74, 48, 65, 00, 00, 00, 00, FF, CC, 31, 00, 0F, 23, 68, 31, 61, 8D, 30, 84, 48, 8A, DC, 4E, E2, B6, 65, 05, A8, C3, 04, DD, F3, 32, 6D, 6F, 41, A5, 7E, D6, C8, BC, C5, E2, C4, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
5.2167

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
48 KB (49,152 bytes)

Scan tmp000a338b - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.