home

wr.exe

Website Realizer

Adritech Software Company Limited

Publisher:
Adritech Software Company Limited  (signed and verified)

Product:
Website Realizer

Version:
1.7.15.0

MD5:
e27337263368ebdc168f8020ca0b2175

SHA-1:
8cc300cda4f4906fe324c928034a2171115db146

SHA-256:
8d98b030cd09c6a29c5a1b3db0091e551533821cf4c910ee4d88da00d3c5520a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 1:57:18 AM UTC  (today)

File size:
29.8 MB (31,255,768 bytes)

Product version:
1.7.15.0

Copyright:
Copyright © 2010-2013 Adritech Software Company Limited

Original file name:
wr.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\website realizer\wr.exe

Digital Signature
Signed by:
Adritech Software Company Limited

Authority:
COMODO CA Limited

Valid from:
8/8/2013 7:00:00 PM

Valid to:
8/9/2014 6:59:59 PM

Subject:
CN=Adritech Software Company Limited, O=Adritech Software Company Limited, STREET=15 Yat Ming Rd, L=Fan Ling, S=New Territories, PostalCode=HK, C=HK

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00931232AF58C2D9B210202A024A53EE63

File PE Metadata
OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
786432:tq+5OtsMZQoTzjNMMbpbGn6v3DYtuFcQRgx6tt:tXqsMWo5Mspbm6LsuFcMG6t

Entry address:
0x4DE9000

Entry point:
68, 00, 00, 00, 00, 68, 01, 00, 00, 00, 68, 00, 00, 40, 00, 68, 00, 80, 1E, 05, E9, 00, 04, 00, 00, CE, 21, 00, 00, 00, 00, 00, 00, 20, 21, 00, 00, 36, 21, 00, 00, 4A, 21, 00, 00, 5C, 21, 00, 00, 0E, 21, 00, 00, 7E, 21, 00, 00, 8A, 21, 00, 00, 96, 21, 00, 00, 6E, 21, 00, 00, 00, 21, 00, 00, 00, 00, 00, 00, B4, 21, 00, 00, 00, 00, 00, 00, 64, 75, 6D, 6D, 79, 00, 64, 75, 6D, 6D, 79, 00, 64, 75, 6D, 6D, 79, 00, 64, 75, 6D, 6D, 79, 00, 64, 75, 6D, 6D, 79, 00, 64, 75, 6D, 6D, 79, 00, 6B, 65, 72, 6E, 65, 6C, 33...
 
[+]

Entropy:
7.9838

Packer / compiler:
PKLITE32 v1.1

Code size:
19.6 MB (20,578,304 bytes)

Scan wr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.