home

ultrasearch-x86-setup.exe

UltraSearch

JAM Software

This is a self-extracting archive and installer. The file has been seen being downloaded from www.jam-software.com.
Publisher:
JAM Software

Product:
UltraSearch

Description:
UltraSearch Setup

Version:
2.1.0.368

MD5:
5428c79a9ec267e39956376353a4ce64

SHA-1:
659ceddc57a6da617fd21289b7d1d3e176cce82d

SHA-256:
056b42c7f3d0efd34ef1b2aa7e20766894852b9e20627a36c37abe1a78221e92

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:23:07 PM UTC  (today)

File size:
6.2 MB (6,483,016 bytes)

Product version:
2.1

Copyright:
(c) 1996-2016 by Joachim Marder

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ultrasearch-x86-setup.exe

File PE Metadata
Compilation timestamp:
1/15/2016 4:22:50 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:t9Aei8SXHrKb0Fi6TfjPSpU12Zv+b3NndnvfcdWrF4wS33MREvQ8vLnQWL025HA7:Ni8SXHmbsfvKp2g4JdfgWyq6VvzoT/US

Entry address:
0x113BC

Entry point:
60, 81, C1, 47, 47, 2B, 7E, F6, C5, AF, 0F, A4, F7, A9, F7, C0, DD, 88, 83, 1F, 0F, C9, 0F, CD, 0F, CA, F3, 13, C3, E8, 65, 00, 00, 00, C6, C4, FB, 8D, 35, F0, 8F, 6D, 68, 0F, C0, CA, C1, DA, 5D, 0F, BA, ED, 03, 81, C7, 36, 4D, 00, 00, 87, DB, 39, D1, 69, F0, A3, F5, 6C, 1E, 2B, DB, 0F, C8, F3, 86, CD, F3, 86, D2, 69, C1, 1A, 2E, 59, 3A, 81, C3, 14, 0D, 00, 00, 0F, AD, DE, 81, EB, 13, 0D, 00, 00, B5, E5, 0F, AF, F6, B2, F4, BF, 8A, 04, 48, D6, F6, C0, D4, 0F, AD, F6, 12, D4, 0F, AF, C9, 81, FB, 43, 03, 00...
 
[+]

Entropy:
7.9929  (probably packed)

Code size:
63.5 KB (65,024 bytes)

The file ultrasearch-x86-setup.exe has been seen being distributed by the following URL.

http://www.jam-software.com/.../UltraSearch-x86-Setup.exe

Scan ultrasearch-x86-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.