home

webinstall.exe

Gleim Internet, Inc

This is the uninstaller utility registered in the Windows Control Panel for the program Gleim EQE Test Prep 4.9 WebDeploy by Gleim. This is installed with multiple programs including Gleim CIA Test Prep 14th Edition WebDeploy and Gleim CPA Test Prep 2012 WebDeploy. The file has been seen being downloaded from gleim-cma-test-prep.software.informer.com and multiple other hosts.
Publisher:
Gleim Internet, Inc  (signed and verified)

MD5:
7c783656b7afaf9c39ac77cd39c7ef35

SHA-1:
901464167c15f5ff73dc12ac5a44f22e70301810

SHA-256:
89a9bfb9c0623497ce60c74ba4f4f8462e75dd7f616615aa5440538c984bd32a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 6:40:08 AM UTC  (today)

File size:
1.6 MB (1,637,464 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\eqetp49\webinstall.exe

Digital Signature
Signed by:
Gleim Internet, Inc

Authority:
Thawte, Inc.

Valid from:
6/9/2011 5:00:00 PM

Valid to:
8/26/2012 4:59:59 PM

Subject:
CN="Gleim Internet, Inc", OU=WWW, O="Gleim Internet, Inc", L=Gainesville, S=Florida, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
343FEA2091981958F6533202889540B2

File PE Metadata
Compilation timestamp:
12/28/2011 11:48:05 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:SzF0oC15OXtF6vBLZcHxM+6Bb6HD74N4AiRySmPfNlvGCcasUf7k1sdp2ngwSEDy:YjC2XtFYLKm+c6j7Pdm+YTb

Entry address:
0x9F988

Entry point:
55, 8B, EC, 83, C4, EC, 33, C0, 89, 45, EC, B8, 4C, E5, 49, 00, E8, F7, 82, F6, FF, 33, C0, 55, 68, 6C, FB, 49, 00, 64, FF, 30, 64, 89, 20, 68, 78, FB, 49, 00, E8, 4B, 86, F6, FF, 66, A3, 4C, CC, 4A, 00, 66, 83, 3D, 4C, CC, 4A, 00, 00, 0F, 84, B0, 00, 00, 00, 6A, 00, 68, 88, FB, 49, 00, E8, 0B, 8B, F6, FF, A3, 50, CC, 4A, 00, 83, 3D, 50, CC, 4A, 00, 00, 75, 11, 6A, 00, 68, 9C, FB, 49, 00, E8, F1, 8A, F6, FF, A3, 50, CC, 4A, 00, 83, 3D, 50, CC, 4A, 00, 00, 74, 7C, 6A, 00, 68, AC, FB, 49, 00, E8, D7, 8A, F6...
 
[+]

Entropy:
5.3049

Developed / compiled with:
Microsoft Visual C++

Code size:
634 KB (649,216 bytes)

Program Uninstaller
Program name:
Gleim EQE Test Prep 4.9 WebDeploy

Display publisher:
Gleim

Display version:
49

Uninstall string:
C:\Program Files (x86)\EQETP49\WebInstall.exe


The file webinstall.exe has been discovered within the following programs.

Gleim CIA Test Prep 14th Edition WebDeploy  by Gleim Publications, Inc.
www.gleim.com
About 9% of users remove it
Gleim CIA Test Prep 15th Edition WebDeploy  by Gleim Publications, Inc.
Publisher's description - “The innovative Gleim Test Prep is an online question bank that is designed to improve your study process & test your knowledge in an interactive environment with actual CIA exam questions.”
About 1% of users remove it
Gleim CIA Test Prep 16th Edition WebDeploy  by Gleim Publications, Inc.
About 4% of users remove it
Gleim CPA Test Prep 2012 WebDeploy  by Gleim Publications, Inc.
About 1% of users remove it
Gleim EA Test Prep 2012 WebDeploy  by Gleim Publications, Inc.
About 7% of users remove it
 
Powered by Should I Remove It?

The file webinstall.exe has been seen being distributed by the following 2 URLs.

http://gleim-cma-test-prep.software.informer.com/.../

https://www.gleim.com/data/tp4/.../webdeploy.exe

Scan webinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.