» firewallstartup.exe
Overview
Analysis
File Details

firewallstartup.exe

Innovative Solutions Grup SRL

File name:

firewallstartup.exe

Publisher:

Innovative Solutions (signed by Innovative Solutions Grup SRL)

Description:

Startup Firewall - guards your computer against annoying startup programs, and auto-applies your choices!

Version:

3.0.0.65

MD5:

ed962741febaef78aa0990f9ac7c1615

SHA-1:

622b39a7e9f169c5f7233e63c22da9e891052082

SHA-256:

de0c8c27a7efc552bf1e0d8a04196269a021ebf85d6a0bb8729b95903ee99124

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 2:14:43 PM UTC (today)

File size:

1.4 MB (1,495,424 bytes)

Product version:

3.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Innovative Solutions Grup SRL

Authority:

VeriSign, Inc.

Valid from:

2/15/2007 6:00:00 PM

Valid to:

2/16/2008 5:59:59 PM

Subject:

CN=Innovative Solutions Grup SRL, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Innovative Solutions Grup SRL, L=Bucharest, S=Bucharest, C=RO

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

58909CBB97FEC2C34CF4055B8FE7DB28

File PE Metadata

Compilation timestamp:

6/19/1992 5:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:7fgfL7XWrnGL0kOkXzuhCnc/RNikkEaje+2d6Yquhdw8XW02YTOeHnjh4S:7IzcGwADTc/R0LeP/quh1WFYTvl

Entry address:

0x1000

Entry point:

68, 01, D0, 6E, 00, E8, 01, 00, 00, 00, C3, C3, 59, 6B, 54, 0C, 2E, B8, B6, 7C, 79, BB, 7D, 70, 44, 90, D1, 64, B3, 6F, 9A, 7C, 67, B0, 17, 06, 11, FD, A9, 1D, 70, A8, 25, 2B, 0D, DA, D8, 8E, 77, 2C, 4E, 12, 7D, 7F, 47, C2, 53, 6B, 5D, 2F, 39, AF, C7, 48, CB, 14, E4, 29, 2E, EA, FD, C1, 89, 41, 65, 04, C8, A9, 0C, C9, B4, 3A, 36, F6, C1, 1F, BD, 68, 1F, 86, 91, 73, FD, 78, 59, 60, 4E, 45, B5, 14, 79, 42, 53, BA, 2F, 02, 20, 9F, EC, 5D, E5, 58, 48, 36, 65, F3, A5, 57, 0C, 66, E1, 26, 0A, FE, 53, EC, 70, 69... 
[+]

Entropy:

7.9820

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.3 MB (1,359,872 bytes)

Scan firewallstartup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.