» hashcheckinstall-2.1.11.exe
Overview
Analysis
File Details
Downloads (1)

hashcheckinstall-2.1.11.exe

code.kliu.org

This is a self-extracting archive and installer. The file has been seen being downloaded from code.kliu.org.

File name:

Publisher:

code.kliu.org

Description:

HashCheck Shell Extension Setup

Version:

2.1.11.1

MD5:

0ce4c5ebe476604982ae8f6cdef9e933

SHA-1:

bbc518e17b5a1957f3a443065e82dd4ddf437d29

SHA-256:

75c73f14e86e35a2a510e08c99fca6dd499f75d63678b6763c046ea42007073b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 12:58:21 AM UTC (today)

File size:

83.8 KB (85,853 bytes)

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\hashcheckinstall-2.1.11.exe

File PE Metadata

Compilation timestamp:

7/8/2009 11:13:25 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

1536:nSFvCJIzL+BCAX7NeYRNsKyjrDW26MzzYylDnnpjB95/u4a6NeAss1G9:nqvCJIzL+BC2eqsKyjrq26ScylDnnpjQ

Entry address:

0x146C

Entry point:

55, 8D, 6C, 24, 88, 81, EC, 0C, 07, 00, 00, 53, 56, 57, 33, DB, 53, FF, 15, 68, 10, 40, 00, 89, 45, 68, 8D, 45, 74, 50, 89, 5D, 74, FF, 15, 74, 10, 40, 00, 50, FF, 15, 88, 10, 40, 00, 8B, F0, 33, C0, 40, 89, 45, 60, 89, 45, 70, 89, 5D, 64, 89, 5D, 6C, FF, 15, 60, 10, 40, 00, 3C, 06, 1B, FF, 47, 39, 5D, 74, 74, 76, 3B, F3, 74, 72, FF, 4D, 74, 74, 66, 8B, 1D, 6C, 10, 40, 00, 8B, 45, 74, 68, D0, 10, 40, 00, FF, 34, 86, FF, D3, 85, C0, 75, 05, 21, 45, 60, EB, 43, 8B, 45, 74, 68, E4, 10, 40, 00, FF, 34, 86, FF... 
[+]

Entropy:

7.4317

Code size:

4.5 KB (4,608 bytes)

The file hashcheckinstall-2.1.11.exe has been seen being distributed by the following URL.

http://code.kliu.org/hashcheck/.../HashCheckInstall-latest.exe

Scan hashcheckinstall-2.1.11.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.