home

Installer.exe

Sitecom Driver/Utility Installer v1.4.3

Sitecom Europe BV

Publisher:
Sitecom Europe BV  (signed and verified)

Product:
Sitecom Driver/Utility Installer v1.4.3

Version:
1.04.3006

MD5:
adcc20ddd14f183fb9f23634056ce589

SHA-1:
d2f37b496d8c6e4a7c1ff900bb1d839b1b7c0133

SHA-256:
ae151afd35c5e5313e6b52e97b9a285fe728e21f3661df7e015509fa8b62d6eb

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/17/2025 11:48:21 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

AVG
Win32/DH{Y4EKNQ?}
2017.0.2650

Qihoo 360 Security
HEUR/QVM41.1.0000.Malware.Gen
1.0.0.1120

File size:
2.8 MB (2,913,608 bytes)

Product version:
1.04.3006

Copyright:
Copyright (C) Sander van Ielen, 2007-2009

Original file name:
Installer.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\dri49a6.tmp

Digital Signature
Signed by:
Sitecom Europe BV

Authority:
VeriSign, Inc.

Valid from:
6/2/2010 2:00:00 AM

Valid to:
7/24/2012 1:59:59 AM

Subject:
CN=Sitecom Europe BV, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sitecom Europe BV, L=Rotterdam, S=Zuid Holland, C=NL

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7FBD769604B3780650217D54F733AF00

File PE Metadata
Compilation timestamp:
7/7/2010 3:57:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:vOJogWTg2Cgjf7vXBpq26jIDSvQ7NTkCQlhviRqEVeMUz5Yl:vLg+RfTBpqsDSvAT9QKcEV1Uz5E

Entry address:
0x2464

Entry point:
68, F8, 28, 40, 00, E8, F0, FF, FF, FF, 00, 00, 50, 00, 00, 00, 30, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, 01, 3A, DA, 8D, 78, 75, 33, 4C, 9E, A7, A2, 57, CB, 2E, 81, F2, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 49, 00, 06, 50, 83, 02, 53, 69, 74, 65, 63, 6F, 6D, 49, 6E, 73, 74, 61, 6C, 6C, 65, 72, 00, 00, 00, 00, 48, D1, FB, 00, 00, 00, 00, 00, DC, 9A, FD, 00, 00, 00, 00, 00, 98, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 0F, 00, 00, 00, 33, 04, DD, A6, 3A, 96, A4, 49, B5, 6C, 2A, FD, DA, E1, CF, E2...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
220 KB (225,280 bytes)

Scan Installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.