» wd6_templates_glossytreeview.exe
Overview
Analysis
File Details

wd6_templates_glossytreeview.exe

Web Designer 6 Addon Templates

Xara Ltd

File name:

Publisher:

Xara Group Ltd (signed by Xara Ltd)

Product:

Web Designer 6 Addon Templates

Description:

Web Designer 6 Addon Templates (en-GB)

Version:

1.0.0.0

MD5:

6d517dc279219f3047def8ab09bc20af

SHA-1:

faec2330ee5d43b1d566f862500003448a8c52f0

SHA-256:

f2b18e44c5e9e71b1a84b78438aec90e28d19c5bac1a22607e48a967204a82f1

Scanner detections:

1 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

4/23/2024 7:57:03 AM UTC (today)

Scan engine

Detection

Engine version

ESET NOD32

Detection.Undefined

7.0.302.0

File size:

9.1 MB (9,515,736 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Digital Signature

Signed by:

Xara Ltd

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/14/2009 8:00:00 PM

Valid to:

9/23/2010 7:59:59 PM

Subject:

CN=Xara Ltd, OU=SECURE APPLICATION DEVELOPMENT, O=Xara Ltd, L=Hemel Hempstead, S=Herts, C=UK

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

427A3892387BFA3024359C59BF016E15

File PE Metadata

Compilation timestamp:

8/6/2010 7:27:39 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

196608:zUYULwLadN2gvwuFC1eIv3fRGwFNUtyajd73+pRI659VMV561PrsGF9K:6RmmwfIIvZJuya53+pRJ59VMV81Pr

Entry address:

0x321BF

Entry point:

E8, 7B, 83, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, 70, 06, 48, 00, 75, 02, F3, C3, E9, FB, 83, 00, 00, 51, C7, 01, 8C, EA, 46, 00, E8, F3, 84, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, 7D, 44, FE, FF, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, 3D, 85, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, C1, 83, 60, 04, 00, 83, 60, 08, 00, C7, 00, 94, EA, 46, 00, C3, 53, 8B, 5C, 24, 08, 56, 57, 8B, F9, C7, 07, 94, EA, 46, 00, 8B, 03... 
[+]

Entropy:

7.9537 (probably packed)

Code size:

412 KB (421,888 bytes)

Scan wd6_templates_glossytreeview.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.