» zsplit3.ax
Overview
Analysis
File Details

zsplit3.ax

Korea Educational Broadcasting System

File name:

zsplit3.ax

Publisher:

Korea Educational Broadcasting System (signed and verified)

MD5:

6d74d1b2508cec1a9ff530137b3d330d

SHA-1:

92f128c94ec3c9b86b85d220d2960bed428ee332

SHA-256:

3955ccc8c91e5e3943f5c8447d7c4c17dd9b85c882f9d4784f39f51fc7739678

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

7/7/2025 3:54:57 AM UTC (today)

File size:

6.7 MB (7,027,840 bytes)

Digital Signature

Signed by:

Korea Educational Broadcasting System

Authority:

thawte, Inc.

Valid from:

1/20/2016 9:00:00 AM

Valid to:

5/26/2016 8:59:59 AM

Subject:

CN=Korea Educational Broadcasting System, O=Korea Educational Broadcasting System, L=Seocho-gu, S=Seoul, C=KR

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

22A82E22C3E51DCAAD9A03B38C61B169

File PE Metadata

Compilation timestamp:

11/17/2014 10:09:40 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

196608:I4hp0nYvIAarhoI88Vfwz9z+BSZGE/kGp5woM9as6jpPYpqJCW:IWcza3x3ewpwMJCW

Entry address:

0x1980

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 10, 57, 8B, 7D, 0C, 56, 57, 53, E8, 6B, E6, 03, 00, 56, 57, 53, E8, A1, FA, 02, 00, 5F, 5E, 5B, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 83, EC, 08, 56, 57, 8D, 45, F8, 33, F6, 50, 56, 89, 75, F8, E8, 79, 04, 00, 00, 8B, F8, 8D, 55, FC, 52, 89, 75, FC, 8B, 0F, 8B, 01, 68, 3C, F6, 4A, 10, 57, FF, D0, 8B, 45, FC, 3B, C6, 74, 10, 8B, 08, 8B, 51, 04, 50, FF, D2, 8B, 75, FC, E8, AD, 6D, 01, 00, 8B, 07, 8B, 50, 0C, 6A, 01, 8B, CF, FF, D2, 5F, 33... 
[+]

Entropy:

6.6441

Developed / compiled with:

Microsoft Visual C++

Code size:

4.7 MB (4,903,424 bytes)

Scan zsplit3.ax - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.