home

wax71e8.tmp

DigiNotar

Publisher:
DigiNotar  (signed and verified)

MD5:
3204023ddf1f9464a9a2474af3856796

SHA-1:
05444e7eb310f62195612ff41757bfe4251e7497

SHA-256:
79ba636ab1bda4dfc4a94776661b143a9b0d3a0f43b492300187aee6a3a6796b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 12:51:54 AM UTC  (today)

File size:
31.3 MB (32,833,536 bytes)

Common path:
C:\users\{user}\appdata\local\temp\wax71e8.tmp

Digital Signature
Signed by:
DigiNotar

Authority:
Entrust.net

Valid from:
7/26/2007 7:59:00 PM

Valid to:
8/26/2013 8:29:00 PM

Subject:
E=info@diginotar.nl, CN=DigiNotar Services 1024 CA, O=DigiNotar, C=NL

Issuer:
CN=Entrust.net Secure Server Certification Authority, OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), O=Entrust.net, C=US

Serial number:
469C2CB0

File PE Metadata
OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
98304:Tep3gvhiWaOuBuPWLE9d8hi7d8h5xd8hHid8h1UPzu04tiw:qpgWLX1L

Entry address:
0x6B00

Entry point:
F0, F1, 5F, 00, D0, F6, 5F, 00, 90, F7, 5F, 00, B0, F7, 5F, 00, 00, FC, 5F, 00, 30, FC, 5F, 00, 50, FC, 5F, 00, 70, FC, 5F, 00, 90, FC, 5F, 00, 60, FD, 5F, 00, 90, FD, 5F, 00, F0, FE, 5F, 00, 10, FF, 5F, 00, 80, FF, 5F, 00, 00, 00, 60, 00, 90, 00, 60, 00, 20, 01, 60, 00, A0, 01, 60, 00, 30, 02, 60, 00, 40, 02, 60, 00, 50, 02, 60, 00, 80, 02, 60, 00, B0, 02, 60, 00, D0, 02, 60, 00, 00, 03, 60, 00, B0, 03, 60, 00, D0, 03, 60, 00, 10, 04, 60, 00, 50, 04, 60, 00, 80, 04, 60, 00, C0, 04, 60, 00, F0, 04, 60, 00...
 
[+]

Entropy:
2.7583

Code size:
4.6 MB (4,861,952 bytes)

Scan wax71e8.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.