» versionchecker.exe
Overview
Analysis
File Details

versionchecker.exe

NXP Semiconductors

File name:

versionchecker.exe

Publisher:

NXP Semiconductors (signed and verified)

MD5:

2d797d6d3c40b67abbdcddd4ff65104c

SHA-1:

d3bb192e9bd7bcd5c92cb959a029bc1993313aa8

SHA-256:

01346eb7a0dffe27d64d01e0d2c755101718924161493896f544cc0c0295aea7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 11:55:01 PM UTC (a few moments ago)

File size:

117.6 KB (120,408 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\binutils\versionchecker.exe

Digital Signature

Signed by:

NXP Semiconductors

Authority:

VeriSign, Inc.

Valid from:

3/11/2013 9:00:00 PM

Valid to:

4/11/2014 8:59:59 PM

Subject:

CN=NXP Semiconductors, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NXP Semiconductors, L=Bangalore, S=Karnataka, C=IN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4CD0A3E6823B903506540288298DFE57

File PE Metadata

Compilation timestamp:

2/18/2014 2:54:50 PM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

12.0

CTPH (ssdeep):

1536:kmUhfuFPEPQoZjCfVmEHnQrAoIBmBzbWIcoQ6ehLE8sWjcdQuasC4J/Zs23+:AfuBE4oZjCtmyoIWLehAjC4J/ZsQ+

Entry address:

0x5C6B

Entry point:

E8, 9A, 29, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 00, 90, 41, 00, 33, C5, 89, 45, FC, 83, 7D, 08, FF, 57, 74, 09, FF, 75, 08, E8, EF, 19, 00, 00, 59, 83, A5, E0, FC, FF, FF, 00, 8D, 85, E4, FC, FF, FF, 6A, 4C, 6A, 00, 50, E8, D1, 2A, 00, 00, 8D, 85, E0, FC, FF, FF, 83, C4, 0C, 89, 85, D8, FC, FF, FF, 8D, 85, 30, FD, FF, FF, 89, 85, DC, FC, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC... 
[+]

Code size:

67.5 KB (69,120 bytes)

Scan versionchecker.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.