home

winman_popupmsg.exe.ref

Winman_PopUpMsg

Winman Software Private Limited

Publisher:
Winman Software Private Limited  (signed and verified)

Product:
Winman_PopUpMsg

Version:
1.00

MD5:
4f907e034d94664bc64133ce5565709d

SHA-1:
6a9f4234ce5493993f4612b5f266246c5a57c601

SHA-256:
5da1458e5b5495cf9e90b50da804085601566d12a899a28f6e1b488bf67fe3dc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/10/2024 11:53:31 PM UTC  (a few moments ago)

File size:
51.1 KB (52,320 bytes)

Product version:
1.00

Original file name:
Winman_PopUpMsg.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\dest old data 10-aug-2015 12.42.43 pm\tax data\2012-2013\ref\winman_popupmsg.exe.ref

Digital Signature
Signed by:
Winman Software Private Limited

Authority:
VeriSign, Inc.

Valid from:
1/4/2011 5:30:00 AM

Valid to:
1/4/2013 5:29:59 AM

Subject:
CN=Winman Software Private Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Winman Software Private Limited, L=Mangalore, S=Karnataka, C=IN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0EF3D580438920FAF188E5B80AE6CC4B

File PE Metadata
Compilation timestamp:
10/6/2012 3:22:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:/Tog3AZ/a8UjrANVdEutW5dy53ff2leYXk33ydgX0Jj+dyYDcDE0s2jC3mirILc8:/Eg3AZ0Zdy53fOdYREJUy1UaVIIL1

Entry address:
0x14E0

Entry point:
68, 04, 1A, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 39, 15, B5, 74, 81, 21, 84, 41, 8E, 6E, 5B, F6, 32, FB, 13, 90, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 6D, 20, 74, 65, 6D, 70, 57, 69, 6E, 6D, 61, 6E, 5F, 50, 6F, 70, 55, 70, 4D, 73, 67, 00, 00, 00, 00, 00, FF, CC, 31, 00, 06, 89, A1, 3E, 93, 35, 53, 26, 42, A6, 22, 37, 8C, FF, C6, 84, 43, 1D, CF, 5B, DA, D9, 90, D4, 4E, 8A, 60, CE, 3D, 4F, 85, 8E, 76, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
5.0106

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
32 KB (32,768 bytes)

Scan winman_popupmsg.exe.ref - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.