» googletoolbarinstaller_spda_signed.exe
Overview
Analysis
File Details

googletoolbarinstaller_spda_signed.exe

Programme d'installation de la barre d'outils Google

Google Inc

This is a self-extracting archive and installer.

File name:

googletoolbarinstaller_spda_signed.exe

Publisher:

Google (signed by Google Inc)

Product:

Programme d'installation de la barre d'outils Google

Version:

3, 0, 128, 1

MD5:

a887af6d37e223b4706bc6324cb18671

SHA-1:

28a2d4aa9bb568ea487784b8608b4a8bcd2722f5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

2/26/2025 9:19:56 PM UTC (today)

File size:

602.1 KB (616,520 bytes)

Original file name:

setup.exe

File type:

Executable application (Win32 EXE)

Language:

French (France)

Common path:

C:\Documents and Settings\{user}\Local settings\temp\googletoolbarinstaller_spda_signed.exe

Digital Signature

Signed by:

Google Inc

Authority:

VeriSign, Inc.

Valid from:

7/18/2005 2:00:00 AM

Valid to:

7/19/2006 1:59:59 AM

Subject:

CN=Google Inc, OU=Digital ID Class 3 - Netscape Object Signing, O=Google Inc, L=Mountain View, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

22A484D30A102A1F368CECDF8ACE6139

File PE Metadata

Compilation timestamp:

11/9/2005 3:28:28 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

12288:jLjuxlz+3y+1w7CEtDHc3+z5MVqX1ErzqhBPF6B5pCq:j3uPzgP1wWmDWw56i1EQ36B5B

Entry address:

0x169D2

Entry point:

B8, 30, 87, 56, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, CE, 72, B5, 9B, FE, 33, 20, C3, A0, 79, 71, 52, 57, 62, C3, BD, DA, 05, A4, 7F, D8, AF, 99, 31, 8E, D6, 72, EB, 70, 2B, 6F, 00, 4A, 58, DA, F5, F4, 3C, B9, 5B, D8, 1C, DA, EE, 5E, CA, 68, 37, 5D, 25, 21, 10, 0F, 15, F7, 11, 35, 69, 99, DB, 20, D9, F3, 89, 54, 8C, EA, CB, CA, 8F, BD, AD, 85, 23, 17, 41, 42, F5, 30, 0D, BE, 06, AC, 3B, 50, 0F, C7, 91, 50, 3D, 76, CC, 99... 
[+]

Packer / compiler:

PECompact v2

Code size:

128 KB (131,072 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.