home

TPmsMsg.exe

TCO!stream

Medialand

Publisher:
Medialand, Inc  (signed by Medialand)

Product:
TCO!stream

Description:
TPmsMsg

Version:
2, 5, 8, 603

MD5:
bd9da3d1f8525336353059bad4d855b9

SHA-1:
b3c437e1375e553d11ace07121d37e34688b9c1c

SHA-256:
2bd13d92c1c0d16b56cb13258f72b18c99db54b7f51585b0b7657e3b257ac631

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 1:25:07 PM UTC  (today)

File size:
43 KB (44,072 bytes)

Product version:
2, 5, 8, 603

Copyright:
Copyright (c) 1996 - 2008 Medialand, Inc

Original file name:
TPmsMsg.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\temp\package_temp\userdefine\samagent\tpmsmsg.exe

Digital Signature
Signed by:
Medialand

Authority:
VeriSign, Inc.

Valid from:
2/20/2008 9:00:00 AM

Valid to:
2/20/2009 8:59:59 AM

Subject:
CN=Medialand, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Medialand, L=Gumchen-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1CF0A702323701DFFA410A89D848A31F

File PE Metadata
Compilation timestamp:
6/4/2008 4:55:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:6VwV/4cZH1IKjDnj7szSRBXuzcEuM1PS/TVRqOwnJKDMZ1RZ12Spkb5:7lbj7n/vuaLVRqOi9gb5

Entry address:
0x3EA0

Entry point:
55, 8B, EC, 6A, FF, 68, 38, 56, 40, 00, 68, 26, 40, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 10, 52, 40, 00, 59, 83, 0D, A8, 72, 40, 00, FF, 83, 0D, AC, 72, 40, 00, FF, FF, 15, 14, 52, 40, 00, 8B, 0D, 88, 72, 40, 00, 89, 08, FF, 15, 18, 52, 40, 00, 8B, 0D, 84, 72, 40, 00, 89, 08, A1, 1C, 52, 40, 00, 8B, 00, A3, A4, 72, 40, 00, E8, 16, 01, 00, 00, 39, 1D, 60, 71, 40, 00, 75, 0C, 68, 22, 40, 40, 00, FF, 15, 54, 52...
 
[+]

Entropy:
4.5313

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
16 KB (16,384 bytes)

Scan TPmsMsg.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.