» zclassic.exe
Overview
Analysis
File Details
Programs (1)

zclassic.exe

z/Scope Classic

Cybele Software Inc.

This is installed with zScope Classic.

File name:

zclassic.exe

Publisher:

Cybele Software Inc. (signed and verified)

Product:

z/Scope Classic

Version:

6.2.0.95

MD5:

15d8985674c1fe1e9ebd6c2904701eaf

SHA-1:

ae51c20f5df33ae535556ed08dbabfd4616ead25

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 7:06:16 AM UTC (today)

File size:

12.7 MB (13,279,720 bytes)

Product version:

6.1

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\data\zccore\a15c50b0\b9ef57f3\zclassic.exe

Digital Signature

Signed by:

Cybele Software Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/14/2008 6:00:00 PM

Valid to:

11/4/2010 5:59:59 PM

Subject:

CN=Cybele Software Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Cybele Software Inc., L=Wilmington, S=DELAWARE, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

30336FA90624FC4F018C978EF6B82447

File PE Metadata

Compilation timestamp:

4/19/2010 1:24:33 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:RSwxcIICXZHVF+SvtVzwD7+nEWSjSGJrJHWNiswN3a9qpEJPRG1tMRMHwYqSRJ:3GInJHVgSvtVzwDKfSeGx1WEoSz

Entry address:

0xCB0490

Entry point:

E9, 15, 6F, B2, FF, F0, 65, BE, C5, 51, 25, FD, B3, EC, C9, F1, 9E, 1E, E2, 9D, C5, 3E, 89, FD, E0, D6, 5B, 1D, 58, 50, 4B, 4C, 49, 54, 45, 33, 32, 20, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 31, E8, D4, DC, FF, FF, 02, 04, 15, BE, 7F, 0B, 70, BA, E8, 93, 88, FD, FF, 37, EE, 19, 1B, A4, 0B, 60, A1, 0F, 80, 0E, 7D, 00, 00, 83, 3D, 78, FB, BA, 00, 00, 0F, 85, FC, 5A, FD, FF, E8, AD, 52, 00, 00, BA, 49, 46, 25, E5, E9, 1F, E4, AD, FF, E8, DF, D9, AC, FF, 06, 56, 2C, E5, A5, 48, 95, F6, E8, D2, D9, AC, FF, CB... 
[+]

Entropy:

6.6183

Packer / compiler:

Xtreme-Protector v1.05

Code size:

7.2 MB (7,531,520 bytes)

The file zclassic.exe has been discovered within the following program.

zScope Classic by Cybele Software, Inc.

About 4% of users remove it

Scan zclassic.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.