home

download.exe

Prospector

TrigoldCrystal

Publisher:
Trigold  (signed by TrigoldCrystal)

Product:
Prospector

Description:
Internet Update program

Version:
9.01.0032

MD5:
bc5c1b02ee5a346242334622ec3719b4

SHA-1:
1401877f91bba95f9c9ba96176dbb0d0d4d30e0a

SHA-256:
d6eab44fc07c3a03528f880607f7da7c75c738d1e63e9f581593a61f24c55411

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 5:55:12 AM UTC  (today)

File size:
2.9 MB (3,065,344 bytes)

Product version:
9.01.0032

Copyright:
Trigold

Original file name:
download.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\trigoldcrystal\prospector\download.exe

Digital Signature
Signed by:
TrigoldCrystal

Authority:
Thawte, Inc.

Valid from:
6/25/2012 1:00:00 AM

Valid to:
8/6/2013 12:59:59 AM

Subject:
CN=TrigoldCrystal, O=TrigoldCrystal, L=Bromsgrove, S=Worcestershire, C=GB

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7FD523E0F42E19F9A9BAD0BAC2409DA6

File PE Metadata
Compilation timestamp:
2/1/2013 11:43:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:HFpOi8/uRXgEa0FNv90000000000000000000000000N9Q900000000000000003:XPdRXgWFNIHQEGf3szOwTE

Entry address:
0x14DC

Entry point:
68, 44, 17, 40, 00, E8, F0, FF, FF, FF, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 46, C3, 1B, DD, 21, A7, F0, 4B, A7, D1, 56, 8E, F7, C6, 70, D7, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 90, DB, FB, 00, 44, 6F, 77, 6E, 6C, 6F, 61, 64, 00, 07, 41, 00, AC, C6, F3, 01, 00, 00, 00, 00, 00, 00, 00, 00, C0, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 6E, 00, 00, 00, 51, 8B, 3A, D0, 1B, 19, E7, 46, A4, 9A, 47, D0, C1, 44, FD, 8E, 01, 00, 00, 00, A0, 00, 00, 00...
 
[+]

Entropy:
5.6435

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
2.9 MB (3,051,520 bytes)

Scan download.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.