home

InstallDriver.EXE

InstallDriver Application

Product:
InstallDriver Application

Description:
InstallDriver MFC Application

Version:
1, 0, 0, 1

MD5:
23e355e71367b71b2e0f0d0866d1be93

SHA-1:
609f67f9fb61fde14fededef8707801012f0df43

SHA-256:
d618a57e663989fdce7c34eddb321d9bbfcdf9860fdd4e0fb9887390c4cc0110

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/16/2024 6:44:16 AM UTC  (today)

File size:
734.5 KB (752,092 bytes)

Product version:
1, 10, 32, 0

Copyright:
Copyright (C) 2005

Original file name:
InstallDriver.EXE

File type:
Executable application (Win32 EXE)

Language:
Chinese (Traditional, Taiwan)

Common path:
C:\users\{user}\downloads\installdriver.exe

File PE Metadata
Compilation timestamp:
8/11/2010 12:58:00 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:/yfUVjJQKXxXjjAZkU5UUXiy8Xtd9AsyG5/tAp3fLO6EwgbA2:/yU82bU/Xiy8ZFAp3fLOj

Entry address:
0x48FF2

Entry point:
E8, 37, EC, 00, 00, E9, 78, FE, FF, FF, 6A, 0C, 68, 40, 24, 49, 00, E8, 98, 3A, 00, 00, 83, 65, E4, 00, 8B, 75, 08, 3B, 35, D0, BC, 49, 00, 77, 22, 6A, 04, E8, 3A, EE, 00, 00, 59, 83, 65, FC, 00, 56, E8, 9C, FB, 00, 00, 59, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 09, 00, 00, 00, 8B, 45, E4, E8, A4, 3A, 00, 00, C3, 6A, 04, E8, 1D, ED, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 83, 3D, 9C, B9, 49, 00, 00, 75, 18, E8, 6D, E1, 00, 00, 6A, 1E, E8, 95, DF, 00, 00, 68, FF, 00, 00, 00, E8, 3C, 03, 00, 00, 59, 59, A1...
 
[+]

Entropy:
5.7990

Code size:
480 KB (491,520 bytes)

The file InstallDriver.EXE has been seen being distributed by the following URL.

https://doc-0o-38-docs.googleusercontent.com/docs/securesc/q804k0aefvdmu2q68uq7s3iq2jr4kvkg/c8ig6vm0ttt7dp0e9aijuvngi1j9lldn/1454457600000/.../05379591704803862343/19kA0twleExEQckxFfkqbN618S2EWxfTC4MI_90jA3pv3Dv-RiytZ1QgR4iJD?e=download

Scan InstallDriver.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.