home

setup.exe

BALARAD s.r.o.

This is a setup and installation application.
Publisher:
BALARAD s.r.o.  (signed and verified)

MD5:
65d406af92958e70513888579cfc7dd9

SHA-1:
e36869783b160d7ac6b1c31cf542af7a9e010607

SHA-256:
1ccde5894f29876d5eea79af200b9f0bca4962e62fcf0bd1fc9afc396131290f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 4:20:29 PM UTC  (today)

File size:
1.5 MB (1,605,864 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\embird\setup.exe

Digital Signature
Signed by:
BALARAD s.r.o.

Authority:
Disig a.s.

Valid from:
10/17/2014 7:26:47 AM

Valid to:
10/17/2015 7:26:47 AM

Subject:
CN=BALARAD s.r.o., OU=CodeSigning, O=BALARAD s.r.o., L=Presov, C=SK

Issuer:
CN=CA Disig I2 Certification Service, O=Disig a.s., L=Bratislava, C=SK

Serial number:
0B36BDE90C82275F5F0000000000000528

File PE Metadata
Compilation timestamp:
2/19/2015 5:58:54 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:XQ9u6WNiScE8A2I8/S85LzdeY+fOMPMoHRRTHj1SeYrDF+BgdkVZT7dKY7tWPCZU:XvLDH8/bdd6PDHT75BuO1PtWPCVBOz

Entry address:
0x1000

Entry point:
68, 01, 30, 75, 00, E8, 01, 00, 00, 00, C3, C3, EC, 8A, B2, AD, 83, 81, E9, 63, ED, 58, 72, 62, 67, 09, 33, FC, D6, EF, F1, 85, A3, 3A, 9A, A1, 3D, B9, 7E, 7C, F3, 2C, 04, 19, E2, CD, 71, 8E, 8E, 90, 59, 58, 42, 63, ED, 20, 4A, 5E, 89, 48, 8B, B0, 1A, AA, 00, C8, F7, A0, 39, 84, F1, 19, FA, AD, 45, D1, 12, 90, BF, 69, 48, 00, 6A, 78, 0F, 47, 90, 29, DE, D2, 12, 1F, 12, E9, 69, 62, CD, CD, 5E, 73, 2D, BB, 62, 58, DC, B3, 63, 33, 23, 22, 67, 0D, 93, 18, 4B, 53, 73, 52, 0C, E1, 11, 3A, 5F, 7E, 52, EA, C3, 1C...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
2.3 MB (2,395,136 bytes)

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.