home

amp.exe

e-Sword AMP Bible Add-On

e-Sword

This is a self-extracting archive and installer. The file has been seen being downloaded from www.e-sword.net.
Publisher:
e-Sword

Product:
e-Sword AMP Bible Add-On

Description:
Setup Launcher Unicode

Version:
9.00.0001

MD5:
54e3bc0008446892ebc0a74059b69aa5

SHA-1:
ff63ad36125d68cdd428838ae127d125c1fcfa69

SHA-256:
04793103602a351f484b6b0a997e0877d2b38c38a02426ddf7b13abfe833e38d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:52:01 AM UTC  (today)

File size:
5.9 MB (6,232,011 bytes)

Product version:
9.00.0001

Copyright:
Copyright (C) 2010 Flexera Software, Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\amp.exe

File PE Metadata
Compilation timestamp:
10/5/2010 1:39:52 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:Qzyhh5OojZlytr3bTsJ7yK+vgLkS2iNZiwLY2rWLxWDVXozjEkOooIMxLeJ:QzytBtlSHskpI28ZrLrXU5OtRsJ

Entry address:
0x68208

Entry point:
E8, 71, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0...
 
[+]

Entropy:
7.9032  (probably packed)

Code size:
684 KB (700,416 bytes)

The file amp.exe has been discovered within the following program.

e-Sword  by Rick Meyers
e-Sword is a Bible study computer software package created by Rick Meyers and developed for Microsoft Windows. The user interface is available in twenty seven different languages. Resources are available in over eighty languages.
www.e-sword.net
6% remove it
 
Powered by Should I Remove It?

The file amp.exe has been seen being distributed by the following URL.

http://www.e-sword.net/files/.../amp.exe

Scan amp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.