home

waxa14f.tmp

bestech

Publisher:
bestech  (signed and verified)

MD5:
9b7905b4be889b51f6ea77525d85b6e0

SHA-1:
3dfce40deafbb4f8b6825ba95f3d7e9228a3cf6c

SHA-256:
920001874a736aac6f55e631f069725f59add0c7da55a2dba1adc524af41b339

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:37:18 AM UTC  (today)

File size:
5.2 MB (5,439,488 bytes)

Common path:
C:\users\{user}\appdata\local\temp\waxa14f.tmp

Digital Signature
Signed by:
bestech

Authority:
INITECH

Valid from:
2/21/2002 11:03:18 AM

Valid to:
2/20/2007 11:03:18 AM

Subject:
E=admin@bestech.com, CN=admin, OU=webteam, O=bestech, L=SEOUL, C=KR

Issuer:
E=sp128-support@initech.com, CN=INITECH Plugin CA, OU=PLUGIN Certificate Authority, O=INITECH, L=Seoul, S=Seoul, C=KR

Serial number:
01AE

File PE Metadata
Compilation timestamp:
6/20/1992 7:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:w2mgeq/EnpEn7txaL5XYijDEg/////qtdJzamiXH03OkiGEN+m1N9AB230MRtTuG:3mQM4BxaXXWd57iXH03Ok+NV1l0od5j

Entry address:
0xA9F88

Entry point:
14, 21, BC, 03, 18, 30, A2, 6E, 00, 00, 00, 00, 50, 08, 5D, 04, 00, 00, 00, 00, A0, 21, BC, 03, 00, 00, 00, 00, 00, 00, 00, 00, 10, 0A, 5D, 04, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 01, 00, 00, 00, 54, CF, 06, 04, 02, 00, 00, 00, 00, 00, 00, 00, 14, 21, BC, 03, 18, 30, A2, 6E, 00, 00, 00, 00, 10, 0B, 5D, 04, 00, 00, 00, 00, A0, 21, BC, 03, 00, 00, 00, 00, 00, 00, 00, 00, A0, 0C, 5D, 04, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 01, 00, 00, 00, 38, CF, 06, 04, 01, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
3.5973

Code size:
676 KB (692,224 bytes)

Scan waxa14f.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.