home

UEDIT32.EXE

UltraEdit

IDM Computer Solutions, Inc.

Publisher:
IDM Computer Solutions, Inc.  (signed and verified)

Product:
UltraEdit

Description:
UltraEdit Professional Text/Hex Editor

Version:
15.00.0.1034

MD5:
02912021f99cea6c4f112623cf1fc5a8

SHA-1:
a59f16caa6c3c818806441c0d9bcb2e6a6875867

SHA-256:
96ad16844c17b195fe1d6d1b6dad24fdcba1dde26bc21697c9c71f1f6ac99ffd

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/20/2024 1:41:20 AM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.Downloader.W32.Geral
2.1.4+

Bkav FE
W32.HfsAdware
1.3.0.6379

File size:
9.1 MB (9,510,672 bytes)

Product version:
15.00.0.1034

Copyright:
IDM Computer Solutions, Inc.

Original file name:
UEDIT32.EXE

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
IDM Computer Solutions, Inc.

Authority:
VeriSign, Inc.

Valid from:
3/19/2008 8:00:00 AM

Valid to:
4/23/2011 7:59:59 AM

Subject:
CN="IDM Computer Solutions, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="IDM Computer Solutions, Inc.", L=Hamilton, S=Ohio, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
692E742C3589A0DF5BB28C88B08EEF65

File PE Metadata
Compilation timestamp:
4/7/2009 6:46:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:8kaZAQrQoH8BfOcBuCE9h7LDAO7CJGOYJe+PlGnztzAc4barvCi3kErN4vi54aqR:CcRO9LDA/8hgX5qR

Entry address:
0x5E0357

Entry point:
E8, 84, C6, 01, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 0C, 8D, 48, FF, 85, C8, 74, 1E, E8, 4D, F0, FF, FF, C7, 00, 16, 00, 00, 00, 33, C0, 50, 50, 50, 50, 50, E8, F5, 0D, FF, FF, 83, C4, 14, 33, C0, 5D, C3, 8B, 4D, 08, 53, 8B, 5D, 10, 56, 33, F6, 3B, DE, 74, 20, 3B, D9, 72, 1C, E8, 1D, F0, FF, FF, 56, 56, 56, 56, 56, C7, 00, 16, 00, 00, 00, E8, C7, 0D, FF, FF, 83, C4, 14, 33, C0, EB, 3E, 83, F8, 04, 77, 03, 6A, 04, 58, 8B, F3, F7, DE, 57, 8D, 78, FF, 83, E6, 03, 8D, 04, 0E, 8D, 44, 38, 04, 50...
 
[+]

Entropy:
6.6221

Code size:
6.8 MB (7,152,128 bytes)

Scan UEDIT32.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.