home

tyranobuilder.exe

EDICOM

Publisher:
EDICOM  (signed and verified)

MD5:
d2b964a0b8d1f49528addb4865ea2d04

SHA-1:
a3481c68f1f01887a055d41d715867f871fff4ac

SHA-256:
5c3dc0a0d5d9983f96fbe3db1553bc2c932731ea9b22403f0ff81617c5954c35

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:42:09 PM UTC  (today)

File size:
41.3 MB (43,308,660 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\tyranobuilder_win_std_v130\tyranobuilder.exe

Digital Signature
Signed by:
EDICOM

Authority:
EDICOM

Valid from:
4/19/2008 1:24:22 AM

Valid to:
4/14/2028 1:24:22 AM

Subject:
C=ES, O=EDICOM, OU=PKI, CN=ACEDICOM Root

Issuer:
C=ES, O=EDICOM, OU=PKI, CN=ACEDICOM Root

Serial number:
618DC7863B018205

File PE Metadata
Compilation timestamp:
4/16/2014 11:36:55 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:E9+jY3A7q4UnIDMT9ph/RAw1jHAo1ByQSTDdUl233Sx+tlJoGyJHjzFFekv9Oe3J:E9+jpOnQMl/RAw1jHAwgQSTDdUCix+tE

Entry address:
0x1483476

Entry point:
E8, EA, DA, 00, 00, E9, 89, FE, FF, FF, B8, AA, 1A, 89, 01, A3, 50, BB, 7F, 02, C7, 05, 54, BB, 7F, 02, A0, 11, 89, 01, C7, 05, 58, BB, 7F, 02, 54, 11, 89, 01, C7, 05, 5C, BB, 7F, 02, 8D, 11, 89, 01, C7, 05, 60, BB, 7F, 02, F6, 10, 89, 01, A3, 64, BB, 7F, 02, C7, 05, 68, BB, 7F, 02, 22, 1A, 89, 01, C7, 05, 6C, BB, 7F, 02, 12, 11, 89, 01, C7, 05, 70, BB, 7F, 02, 74, 10, 89, 01, C7, 05, 74, BB, 7F, 02, 00, 10, 89, 01, C3, 8B, FF, 55, 8B, EC, E8, 96, FF, FF, FF, 83, 7D, 08, 00, 74, 05, E8, D8, E5, 00, 00, DB...
 
[+]

Entropy:
7.0305

Code size:
29.7 MB (31,128,576 bytes)

Scan tyranobuilder.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.