home

eraser_v6.2.0.2962.exe

Heidi Computers Ltd

This is a self-extracting archive and installer. The file has been seen being downloaded from download.instalki.info and multiple other hosts.
Publisher:
The Eraser Project  (signed by Heidi Computers Ltd)

Description:
Eraser Setup Bootstrapper

Version:
6.2.0.2962

MD5:
dab0db48c18fb1ffb6dab8748bfb20f5

SHA-1:
886e18351be38cdf142f1655da4f8b580f1137f0

SHA-256:
977f6851bb314c69711b6a06ce8880344ed3101d0f83a1d8ed2ec64a6aa262ba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:18:49 AM UTC  (today)

File size:
7.9 MB (8,317,032 bytes)

Product version:
6.2.0.2962

Copyright:
Copyright © 2008-2015 The Eraser Project

Original file name:
Eraser Setup Bootstrapper

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\eraser_v6.2.0.2962.exe

Digital Signature
Signed by:
Heidi Computers Ltd

Authority:
GlobalSign nv-sa

Valid from:
10/2/2014 10:56:38 AM

Valid to:
10/3/2015 10:56:38 AM

Subject:
CN=Heidi Computers Ltd, O=Heidi Computers Ltd, S=Co Wicklow, C=IE

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112144228F17E76EB7940B2E882390DD7AF3

File PE Metadata
Compilation timestamp:
1/12/2015 12:56:15 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
196608:XAraHwwbKlJVMYiG19NMeXlgHwe6VoT/3:XArWbKlJhiq9NFCp6yTP

Entry address:
0x10267

Entry point:
E8, 8B, 60, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 08, 83, FE, E0, 77, 6F, 53, 57, A1, C4, EF, 42, 00, 85, C0, 75, 1D, E8, 03, 5E, 00, 00, 6A, 1E, E8, 59, 5E, 00, 00, 68, FF, 00, 00, 00, E8, 47, 4A, 00, 00, A1, C4, EF, 42, 00, 59, 59, 85, F6, 74, 04, 8B, CE, EB, 03, 33, C9, 41, 51, 6A, 00, 50, FF, 15, 0C, 31, 42, 00, 8B, F8, 85, FF, 75, 26, 6A, 0C, 5B, 39, 05, 44, F9, 42, 00, 74, 0D, 56, E8, 2A, 3D, 00, 00, 59, 85, C0, 75, A9, EB, 07, E8, E8, 0F, 00, 00, 89, 18, E8, E1, 0F, 00, 00, 89, 18, 8B...
 
[+]

Entropy:
7.9957  (probably packed)

Code size:
133 KB (136,192 bytes)

The file eraser_v6.2.0.2962.exe has been seen being distributed by the following 35 URLs.

http://download.instalki.info/programy/Windows/Narzedzia/.../Eraser 6.2.0.2962_www.INSTALKI.pl.exe

http://server2.downloadlod.com/.../eraser.exe

http://files.downloadnow.com/s/software/14/01/81/.../Eraser 6.2.0.2962.exe

http://fs41.filehippo.com/8197/.../Eraser 6.2.0.2962.exe

http://filehippo.com/download/file/.../

http://software-files-a.cnet.com/s/software/14/01/81/.../Eraser 6.2.0.2962.exe

http://fs31.filehippo.com/7891/.../Eraser 6.2.0.2962.exe

http://www.filehippo.com/download/file/.../

http://cznic.dl.sourceforge.net/project/eraser/Eraser 6/.../Eraser 6.2.0.2962.exe

http://www.filepuma.com/down/1421168124c7931/eraser_6.2.0.2962/.../0/

http://www.filepuma.com/file/1421168124c7931/eraser_6.2.0.2962/.../0/

http://heanet.dl.sourceforge.net/project/eraser/Eraser 6/.../Eraser 6.2.0.2962.exe

http://iweb.dl.sourceforge.net/project/eraser/Eraser 6/.../Eraser 6.2.0.2962.exe

http://d90u7lmge9g1z.cloudfront.net/knfnpjnnhlnhqqrorj-hgjjeobkipmsnwfk

http://www.reporting-download.com/.../?appid=10231814&r=5&s=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

http://www.reporting-download.com/.../?appid=10231814&r=4&s=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

http://www.reporting-download.com/.../?appid=10231814&r=3&s=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

http://www.reporting-download.com/.../?appid=10231814&r=2&s=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

http://www.reporting-download.com/.../?appid=10231814&r=1&s=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

http://www.reporting-download.com/.../?appid=10231814

http://download.cnet.com/.../?appid=10231814

http://softlayer-ams.dl.sourceforge.net/project/eraser/Eraser 6/.../Eraser 6.2.0.2962.exe

http://telechargement2.pcastuces.com/temp6bs2/.../Eraser_6.2.0.2962.exe

http://www.download.fi/.../download.cfm?version_id=93967&software_id=1414&mirror_id=0&installer=0&perion=0&air_installer=0

http://www.filepuma.com/file/1427529599c7931/eraser_6.2.0.2962/.../0/

http://hivelocity.dl.sourceforge.net/project/eraser/Eraser 6/.../Eraser 6.2.0.2962.exe

http://filehippo.com/de/download/file/.../

http://dl.cdn.chip.de/downloads/.../Eraser_6.2.0.2962.exe

http://download.pcwelt.de/area_release/files/21/18/.../Eraser-6.2.0.2962.exe

http://down.filepuma.com/files/privacy/.../Eraser_v6.2.0.2962.exe

Latest 30 of 35 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.