» installer.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)
Downloads (1)

installer.exe

Business-in-a-Box

Biztree Inc.

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program Business-in-a-Box by Biztree Inc.. This file is installed with the program Business-in-a-Box. The file has been seen being downloaded from www.biztree.com.

File name:

installer.exe

Publisher:

Biztree Inc. (signed and verified)

Product:

Business-in-a-Box

Description:

Business-in-a-Box Installation Wizard

Version:

5.2.0

MD5:

d355ab55eb67e9140279427c8f9bf62c

SHA-1:

454a0d423358cbc855e181bf23aeac466a461200

SHA-256:

f76618121f2a466b4dbd5d0f1ca8b6de3cc2f72df1b7b1cc23a6b28e11e1575c

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/19/2024 6:48:47 AM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

HW32.Paked

1.3.0.4959

File size:

732.8 KB (750,384 bytes)

Product version:

5.2.0

Original file name:

Business-in-a-Box_Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\business-in-a-box\installer.exe

Digital Signature

Signed by:

Biztree Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

5/9/2012 10:20:08 PM

Valid to:

5/9/2014 10:20:08 PM

Subject:

CN=Biztree Inc., O=Biztree Inc., L=Montreal, S=QC, C=CA

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

042D7CFA1B9370

File PE Metadata

Compilation timestamp:

12/17/2011 12:43:15 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:k35y1rVj0ofo3j8la36UJ0y/gkfhe7Q409dt8DT+DO5mnYkV8Z2FYXT8FNzhu/B:6y1ruofyyE6rLkfhe7d0smq5mYkVSdT5

Entry address:

0x2784DE

Entry point:

E8, 3B, FF, FF, FF, 05, 65, 8F, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, D7, 6B, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, 78, E9, 3F, 87, A3, DC, 4F, 53, 52, 72, 09, FA, 4D, F9, 87, 67, C2, 81, 54, 50, 1F, 56, 1F, 50, CF, D2, F1, CD, 57, 03, E2, 8A, C6, 9E, 57, 33, 3D, F0, 79, 5B, 9F, 8D, D6, B6, 60, 19, 89, 57, 4E, C2, F9, A5, 56, D9, 3A, 5D, 6A, 64, F4, A1, 2E, 97, 7D, 64, F9, 95, 5D, D2, C6, 7F, B5, ED, 14, 58, 57, C2, 55, 16, D8, 71, 29, 3F, B0, C9, 7A, D9, B0, 70, 47, 75, 46, 9A... 
[+]

Entropy:

7.7553 (probably packed)

Code size:

319.5 KB (327,168 bytes)

Program Uninstaller

Program name:

Business-in-a-Box

Display publisher:

Biztree Inc.

Display version:

5.0.4

Uninstall string:

C:\Program Files\Business-in-a-Box\Installer.exe /u

The file installer.exe has been discovered within the following program.

Business-in-a-Box by Biztree Inc.

Publisher's description - “Business-in-a-Box helps you complete a wide range of activities, from contract writing to daily communications, client acquisition, business management, HR management, accounting and more.”

www.biztree.com

About 9% of users remove it

The file installer.exe has been seen being distributed by the following URL.

http://www.biztree.com/.../business-in-a-box_setup2012.exe

Scan installer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.