home

BluPro.exe

Bkav Antivirus Software

Bkav Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘BLuPro’.
Publisher:
Bkav Corporation  (signed and verified)

Product:
Bkav Antivirus Software

Description:
BkavPro

Version:
3, 0, 0, 1

MD5:
438cd8e082ae0d82b976d1a0de6696ae

SHA-1:
55378f6c0ae4789d82442bc84784e5c92b7c01ac

SHA-256:
2c63157b1fc2edc73b71a6af3f28246518b70a3ae30e195b264951eee9b80623

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 6:36:15 PM UTC  (today)

File size:
125.3 KB (128,312 bytes)

Product version:
3, 0, 0, 1

Copyright:
© Bkav Corporation. All rights reserved.

Original file name:
BluPro.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\blupro\blupro.exe

Digital Signature
Signed by:
Bkav Corporation

Authority:
VeriSign, Inc.

Valid from:
11/12/2009 7:00:00 AM

Valid to:
11/13/2010 6:59:59 AM

Subject:
CN=Bkav Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Bkav Corporation, L=Hanoi, S=Hanoi, C=VN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0618369C99673C6EAB7B43F2ABCFE0E3

File PE Metadata
Compilation timestamp:
6/21/2010 9:45:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:gQMMfFhIujs40ruc+NF1zwBjshix1dAj5jhH/mldDcu:gQMMfFhIujs40ruc+NF1zwBjiixTa5jW

Entry address:
0xC5FA

Entry point:
55, 8B, EC, 6A, FF, 68, 58, 22, 41, 00, 68, 54, B5, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, D0, 21, 41, 00, 33, D2, 8A, D4, 89, 15, C4, 71, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, C0, 71, 41, 00, C1, E1, 08, 03, CA, 89, 0D, BC, 71, 41, 00, C1, E8, 10, A3, B8, 71, 41, 00, 33, F6, 56, E8, CA, 21, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 5C, 19, 00, 00, FF, 15, CC, 21, 41, 00, A3, C4, 86, 41, 00, E8...
 
[+]

Entropy:
5.7990

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
68 KB (69,632 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BLuPro

Command:
C:\Program Files\blupro\blupro.exe


Scan BluPro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.