home

startmenureviversetup_1.0.0.1836_smartupdate.exe

Start Menu Reviver

ReviverSoft

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This file is installed with the program Start Menu Reviver. The file has been seen being downloaded from downloads.reviversoft.com.
Publisher:
ReviverSoft  (signed and verified)

Product:
Start Menu Reviver

Version:
1.0.0.1836

MD5:
243d6f9a6cc0ffcba571dda26a463a0f

SHA-1:
31bc9b1566820c470715b5df33e2156c06ac9a47

SHA-256:
a8d6e6539a9d52f0417c8e70856350fb489ad63e032394bc841755c88b4b1862

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 1:21:56 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GE.5058D345
7.2.264

File size:
5.7 MB (6,004,376 bytes)

Copyright:
Copyright © 2013. ReviverSoft. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\startmenureviversetup_1.0.0.1836_smartupdate.exe

Digital Signature
Signed by:
ReviverSoft

Authority:
VeriSign, Inc.

Valid from:
7/11/2011 5:00:00 PM

Valid to:
7/1/2014 4:59:59 PM

Subject:
CN=ReviverSoft, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ReviverSoft, L=Walnut Creek, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
67CBBBC287729969E701CBDA1DED7CA8

File PE Metadata
Compilation timestamp:
4/10/2010 5:19:31 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:5JM8rNa4+tvrFcUnVN5jwgLEQBbITQCkgVWzBTekQG9IfJpnE4C:5JMckTF559LEQB08Czq92tC

Entry address:
0x354B

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
7.9738

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file startmenureviversetup_1.0.0.1836_smartupdate.exe has been discovered within the following programs.

Start Menu Reviver  by ReviverSoft LLC
Publisher's description - “Start Menu Reviver is an innovative application that adds a Start Menu to Windows 8 PCs and enhances the Start Menu on Windows 7 PCs. Start Menu Reviver is the only Start Menu utility to revive the Microsoft Windows Start menu, not just replace it.”
www.reviversoft.com/start-menu-reviver/welcome
47% remove it
 
Powered by Should I Remove It?

The file startmenureviversetup_1.0.0.1836_smartupdate.exe has been seen being distributed by the following URL.

http://downloads.reviversoft.com/StartMenuReviverUpdate_1.0.0.1836.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.