home

wax6321.tmp

bestech

Publisher:
bestech  (signed and verified)

MD5:
d8f63cd09e262fc32710ab4b099b6495

SHA-1:
de332126ff52ec947f078af0e9efbdbcb3d19cbd

SHA-256:
8e428b26d84a7b49481241e237f35c83dcc00f6dc8abc2aab88975dd7b7f87a7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 2:56:41 AM UTC  (today)

File size:
17.7 MB (18,513,920 bytes)

Common path:
C:\users\{user}\appdata\local\temp\wax6321.tmp

Digital Signature
Signed by:
bestech

Authority:
INITECH

Valid from:
2/21/2002 11:03:18 AM

Valid to:
2/20/2007 11:03:18 AM

Subject:
E=admin@bestech.com, CN=admin, OU=webteam, O=bestech, L=SEOUL, C=KR

Issuer:
E=sp128-support@initech.com, CN=INITECH Plugin CA, OU=PLUGIN Certificate Authority, O=INITECH, L=Seoul, S=Seoul, C=KR

Serial number:
01AE

File PE Metadata
Compilation timestamp:
4/28/2015 10:08:45 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:r5+/xPVKryXBcf2z7keepOEIDTtkoeplWrjCRQjrLzmCH:r4/VVPXBcf2z7kv1IFklvrWjT

Entry address:
0x45D0E0

Entry point:
B2, 40, FF, 5B, 64, C5, BB, AA, 26, 51, E9, A8, 69, AF, 3C, 5E, 8D, 32, 1F, DE, F6, F5, EC, 3F, 53, 75, 9F, F7, 37, 93, 7E, D7, EF, 17, D9, CC, CD, 06, 91, D3, 47, 8D, 42, 72, 9F, 1D, 79, 1B, F4, C6, 5B, B5, E3, E7, 74, AA, B9, C6, 6F, FF, 40, 0A, 35, B3, C0, 26, 68, F2, AC, 40, D8, CF, 6D, 2E, C5, F4, 31, 8A, A5, 33, E8, F4, 13, 7D, D6, 05, 3E, 6E, 97, 25, 05, 36, 0E, EC, 30, A4, 1E, 76, 59, F4, 1D, B6, 44, 6A, FA, D5, 19, 77, 9B, EE, 16, 64, C1, 08, 83, 62, 80, AE, 19, 97, 90, 20, B6, 97, 04, 33, 49, 3A...
 
[+]

Entropy:
3.2389

Code size:
5.1 MB (5,376,512 bytes)

Scan wax6321.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.