» database.addin.setup.exe
Overview
Analysis
File Details

database.addin.setup.exe

Starfield Technologies, Inc.

The program is a setup application that uses the Microsoft Setup installer.

File name:

Publisher:

Starfield Technologies, Inc. (signed and verified)

Description:

Setup

Version:

10.0.30319.1 built by: RTMRel

MD5:

c7e8790ec0c90af2bbca5b1ec60047fa

SHA-1:

baeed43a512fa9ebc6c3c43f32bd90b22742177b

SHA-256:

31450e3a76614cb0b12fa3d5e0112182b0ae46974fef23405b92b27dec9ff8a1

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/25/2024 6:04:51 AM UTC (today)

Scan engine

Detection

Engine version

Trend Micro House Call

HV_ZYX_CA232E89.TOMC

7.2.149

File size:

801.5 KB (820,696 bytes)

Product version:

10.0.30319.1

Original file name:

setup.exe

File type:

Executable application (Win32 EXE)

Installer:

Microsoft Setup

Language:

English (United States)

Common path:

C:\users\{user}\downloads\database.addin.setup.exe

Digital Signature

Signed by:

Starfield Technologies, Inc.

Authority:

Starfield Technologies, Inc.

Valid from:

10/6/2011 12:07:17 PM

Valid to:

10/7/2014 2:58:20 PM

Subject:

CN="Starfield Technologies, Inc.", OU="Starfield Technologies, Inc.", O="Starfield Technologies, Inc.", L=Scottsdale, S=AZ, C=US

Issuer:

SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

07A2A627C9A92D

File PE Metadata

Compilation timestamp:

3/18/2010 5:21:36 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:07IRWDvFa+nhmuF3Y0scpeDuUlXdhTUkG:07GUo+F3YlIiTG

Entry address:

0x2E541

Entry point:

E8, 9E, 4E, 00, 00, E9, 84, FE, FF, FF, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, 43, 15, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 55, 0C, EB, 08, 66, 3B, CA, 74, 12, 83, C0, 02, 0F, B7, 08, 66, 85, C9, 75, F0, 66, 39, 10, 74, 02, 33, C0, 5D, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A0, 01, 00, 00, 81, F9, 80, 00, 00, 00, 72, 1C, 83, 3D, 68, 2F, 45, 00, 00, 74, 13... 
[+]

Entropy:

5.5447

Code size:

314.5 KB (322,048 bytes)

Scan database.addin.setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.