» comodofp_setup_english_chinese_traditional_2.4.16.174.exe
Overview
Analysis
File Details

comodofp_setup_english_chinese_traditional_2.4.16.174.exe

Comodo Desktop Installer

Comodo CA Limited

This is a setup and installation application.

File name:

Publisher:

COMODO (signed by Comodo CA Limited)

Product:

Comodo Desktop Installer

Version:

1.0.0.9

MD5:

1b1d99be287dc54a7a54a3848aaefa61

SHA-1:

114be49d89d2b73d2985abff50a2b766f5316db6

SHA-256:

84943cbb42206b981389645be2a999775ea7759579e611194f6c24562a81b851

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 11:06:30 AM UTC (today)

File size:

8.5 MB (8,864,848 bytes)

Product version:

1.0.1.0

Original file name:

CDI.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\comodofp_setup_english_chinese_traditional_2.4.16.174.exe

Digital Signature

Signed by:

Comodo CA Limited

Authority:

The USERTRUST Network

Valid from:

5/13/2005 8:00:00 AM

Valid to:

5/14/2007 7:59:59 AM

Subject:

CN=Comodo CA Limited, O=Comodo CA Limited, STREET=New Court, STREET=Regents Place, STREET=Regent Road, L=Salford, S=Greater Manchester, PostalCode=M5 4HB, C=GB

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

52EFC07FAF383108B033EE05CD32AFD8

File PE Metadata

Compilation timestamp:

1/19/2007 1:49:09 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

196608:Ar0QB/WeJaJ8vontJMQnA2JsGmE3bjI7/PrHey:KFB/We8HgKbhtb4Lj

Entry address:

0x196BE

Entry point:

B8, 20, A7, F3, 01, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, F5, F3, 0C, 5A, E7, 86, 44, A3, 7E, F8, 90, 6B, 0A, 0F, A8, 88, 13, DC, 1D, F7, A3, 39, 8B, 7C, A0, BF, 18, E3, 44, EA, 4F, CD, BD, A2, EE, 02, 69, 50, 4C, FC, 59, 00, 86, 5A, 86, 42, D1, 37, 44, 6F, EA, 6A, FB, 50, 38, 7C, 1A, 93, 43, 27, CF, 92, 46, AB, 64, 80, B4, 7E, E5, 66, D1, 12, BF, 11, 92, 94, 5F, 6E, CD, F0, F8, 2A, 2A, FA, B2, C3, 4B, 7F, B2, 71, A7, B6, E6... 
[+]

Entropy:

7.9999

Packer / compiler:

PECompact v2

Code size:

212 KB (217,088 bytes)

Scan comodofp_setup_english_chinese_traditional_2.4.16.174.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.