» Inshlpr.exe
Overview
Analysis
File Details

Inshlpr.exe

Zemana AntiLogger

Zemana Ltd.

This is a self-extracting archive and installer.

File name:

Inshlpr.exe

Publisher:

Zemana Ltd. (signed and verified)

Product:

Zemana AntiLogger

Description:

AntiLogger Install Helper Executable

Version:

1.7.2.507

MD5:

22567764942641996a07e55afa56e257

SHA-1:

e0ae00ff66373c8d4592dab53d548ac6e7950cd6

SHA-256:

6dca382e8c9132ff62da3767334f5feaec6028c2d402c8dd8b6036218adda16c

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/24/2024 6:12:24 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/170.3

McAfee

New Malware.bl

5600.7214

Quick Heal

(Suspicious) - DNAScan

2.14.10.00

File size:

464.4 KB (475,496 bytes)

Product version:

1.7.2.0

Trademarks:

AntiLogger(tm) is a trademark of Zemana Ltd.

Original file name:

Inshlpr.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\antilogger\inshlpr.exe

Digital Signature

Signed by:

Zemana Ltd.

Authority:

VeriSign, Inc.

Valid from:

12/15/2009 2:00:00 AM

Valid to:

12/16/2010 1:59:59 AM

Subject:

CN=Zemana Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Zemana Ltd., L=Sofia, S=Lozenetz, C=BG

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

009328EAED0B63EC18CF9EF6A8623B40

File PE Metadata

Compilation timestamp:

4/13/2010 5:29:14 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

6144:hAt3EhGIIvI5Vxsme7gXZ+2XpvWbV780PmEV10UBOn+aCP0vdZhhL0MT+yHLkCrA:GtUhzhQmZst809V1jBGWPCZHB+MwCk

Entry address:

0x1000

Entry point:

68, 01, 10, 4C, 00, E8, 01, 00, 00, 00, C3, C3, 7A, B1, 84, FC, 98, 6F, 20, 76, 81, AE, 1F, 09, 66, CF, A9, 6A, D4, 2D, B0, 9E, 31, CA, AA, EC, 0F, AB, EE, 2A, D7, 4A, 9B, 52, A3, F8, 4D, CB, CF, 5C, 17, 4F, 76, CD, 65, 6D, 80, D3, B5, 65, BB, FA, 57, 1F, 6F, 51, 59, DD, C6, 5E, 69, 44, 1B, 5D, A4, E3, 98, 21, 6D, 23, 36, C8, 81, 26, B2, DE, C3, 59, 96, 91, 7F, 83, 5F, 1A, BB, E8, 4A, FD, 48, 59, 18, F6, E4, 81, 08, BA, 44, 9F, 0D, 48, A9, 15, D7, 3C, A0, 88, 52, 41, D8, 8A, 8B, E7, 74, 96, EF, C9, 2E, 75... 
[+]

Entropy:

7.9009 (probably packed)

Code size:

540 KB (552,960 bytes)

Scan Inshlpr.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.