» tmp001d3a85
Overview
Analysis
File Details
Programs (1)

tmp001d3a85

Able2Extract

Investintech.com Inc.

This is installed with Able2Extract 8.0.

File name:

tmp001d3a85

Publisher:

Investintech.com Inc. (signed and verified)

Product:

Able2Extract

Version:

8.0.40

MD5:

e01407717b613bc60dc2e0b899c59ba6

SHA-1:

d2d031fd786de4011b4086e2953d8f4d8f49066d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 11:25:38 PM UTC (a few moments ago)

File size:

17.6 MB (18,479,512 bytes)

Product version:

8.0.40

Original file name:

Able2Extract.exe

Language:

English (United States)

Common path:

C:\windows\temp\tmp00004fc6\tmp001d3a85

Digital Signature

Signed by:

Investintech.com Inc.

Authority:

VeriSign, Inc.

Valid from:

8/14/2013 5:30:00 AM

Valid to:

9/14/2014 5:29:59 AM

Subject:

CN=Investintech.com Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Investintech.com Inc., L=Toronto, S=Ontario, C=CA

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4F22727028DE3AF451909D2FFC6465F7

File PE Metadata

Compilation timestamp:

10/9/2013 2:19:42 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

393216:iTecmHNBjyqs1IIIIIIIaIIIIIII8b+nF8oql5SLQnUWK3P/GGUw80tBmOSLw+y:8oHNgqMIIIIIIIaIIIIIII88Qn9y

Entry address:

0xAF050A

Entry point:

E8, B5, 0A, 00, 00, E9, 39, FD, FF, FF, 6A, 08, B8, B2, 15, 0E, 01, E8, 38, 0B, 00, 00, FF, 75, 08, 83, 65, FC, 00, E8, 8C, FA, FF, FF, 59, 89, 45, EC, 8B, 45, EC, E8, 56, 0B, 00, 00, C3, 83, 65, EC, 00, B8, 30, 05, EF, 00, C3, CC, FF, 25, 1C, 3A, 16, 01, FF, 25, 18, 3A, 16, 01, FF, 25, 0C, 3A, 16, 01, FF, 25, 04, 3A, 16, 01, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB... 
[+]

Entropy:

6.4464

Code size:

13.4 MB (14,032,896 bytes)

The file tmp001d3a85 has been discovered within the following program.

Able2Extract 8.0 by Investintech.com Inc.

Publisher's description - “Able2Extract is a powerful PDF Converter tool that lets users convert their PDF data into formatted MS Excel spreadsheets, editable MS Word documents, Publisher files, forms, powerpoint presentations, Autocad (DWG, DXF), Open Office, image formats (jpeg, bmp, png, tiff, etc.”

www.investintech.com/prod_a2e.htm

5% remove it

Scan tmp001d3a85 - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.