home

Investar.exe

Proseon Technologies Pvt Ltd

Publisher:
Proseon Technologies Pvt Ltd  (signed and verified)

Version:
5.4.0.3323

MD5:
b32a49b74e7b9ca499ffa665cbc92511

SHA-1:
4030beb9cb2fc11119fdb266a4976c9e36fd416d

SHA-256:
406325a824422efe610fbb0425a7de79c4ffe31cdceeee102c33181423091e5f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/11/2025 9:31:21 PM UTC  (today)

File size:
4.6 MB (4,840,952 bytes)

Product version:
5.4.0.3323

Copyright:
©2007-2016 Proseon Inc. - All Rights Reserved

Original file name:
Investar.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\t0b8hg5q.mr3\931n7e33.n0e\investar.exe

Digital Signature
Signed by:
Proseon Technologies Pvt Ltd

Authority:
COMODO CA Limited

Valid from:
1/23/2015 5:30:00 AM

Valid to:
1/23/2018 5:29:59 AM

Subject:
CN=Proseon Technologies Pvt Ltd, O=Proseon Technologies Pvt Ltd, STREET=408 Race Course Tower, STREET=Race Course, L=Vadodara, S=Gujarat, PostalCode=390007, C=IN

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D1AD7AEC4D1FFFCA2C8A255095887587

File PE Metadata
Compilation timestamp:
2/23/2017 12:40:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x4989DE

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8410

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
4.6 MB (4,812,800 bytes)

Scan Investar.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.