home

Instalar.exe

Neo Security USB

Neo Technology S.A de C.V

Publisher:
Neo Technology S.A. de C.V.  (signed by Neo Technology S.A de C.V)

Product:
Neo Security USB

Version:
5.00

MD5:
bd0b610e9533d8e3ff46dd09555cc2e6

SHA-1:
95ab866557d59a795e2f03801f091c2434f8aa80

SHA-256:
6d0bbb9daac7c0ea570674f38720a4479744d413bfcba7a5c8ec2bf144f4434b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 4:23:31 AM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
23.00.65.16610

File size:
406.3 KB (416,064 bytes)

Product version:
5.00

Original file name:
Instalar.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\instalar.exe

Digital Signature
Signed by:
Neo Technology S.A de C.V

Authority:
VeriSign, Inc.

Valid from:
3/11/2013 6:00:00 PM

Valid to:
3/12/2014 5:59:59 PM

Subject:
CN=Neo Technology S.A de C.V, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Neo Technology S.A de C.V, L=Mexico, S=Distrito Federal, C=MX

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
723B698CF4F202ABFD3F6034406F6D42

File PE Metadata
Compilation timestamp:
4/27/2013 3:40:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:N99UdgFWTtPOyS+ZHxh/58y1OqyIz/Fgg00A:14gohPHS+ZRF6yhFg+A

Entry address:
0x1B8C

Entry point:
68, 38, 9F, 41, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, AC, 04, 13, EB, 2C, F4, D9, 4F, B0, A7, 5F, 97, 33, D8, DB, CF, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 70, 65, 61, 72, 61, 6E, 4E, 65, 6F, 5F, 53, 65, 63, 75, 72, 69, 74, 79, 5F, 55, 53, 42, 00, 6C, 61, 74, 0D, 0A, 20, 20, 00, 00, 00, 00, FF, CC, 31, 00, 0C, E6, F5, 86, 4A, 88, B5, 61, 4F, 9C, 73, DF, 12, 91, BA, 1C, DD, 22, DD, 28, 85, F9, 4B, E8, 4A, BD, 2E, 18, 4D, EF, A3, 57, E5, 3A, 4F, AD...
 
[+]

Entropy:
7.3414

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
388 KB (397,312 bytes)

Scan Instalar.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.