» SALSPAWN.EXE
Overview
Analysis
File Details

SALSPAWN.EXE

Altap Salamander

ALTAP, spol. s r.o.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer.

File name:

SALSPAWN.EXE

Publisher:

ALTAP (signed by ALTAP, spol. s r.o.)

Product:

Altap Salamander

Description:

Spawn for Altap Salamander

Version:

1.02

MD5:

222d4ef99861687a2b32ee9c49f3dd9c

SHA-1:

9b74552387d250513791b70ff13fb0e78c72f217

SHA-256:

94c90815e9b837a691c1142d192938b94244ffe64f4517ce17823b976e9deb14

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 2:44:51 PM UTC (today)

File size:

10.8 KB (11,104 bytes)

Product version:

3.0 beta 1 (x86)

Original file name:

SALSPAWN.EXE

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

English (United States)

Common path:

C:\Program Files\altap salamander (beta)\utils\salspawn.exe

Digital Signature

Signed by:

ALTAP, spol. s r.o.

Authority:

VeriSign, Inc.

Valid from:

12/16/2011 12:00:00 AM

Valid to:

12/15/2012 11:59:59 PM

Subject:

CN="ALTAP, spol. s r.o.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="ALTAP, spol. s r.o.", L=Novy Bor, S=Czech Republic, C=CZ

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

15B5914796E0E0C8D4DBF5841D3ACB8C

File PE Metadata

Compilation timestamp:

11/30/2012 2:47:00 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

192:tvZc+Mde5gxK4+5B0335/wJirNmL/DrSvpE+v7Rr9ZCspE+TMIrHBAv:jc+Mc5gL+Y3mirILCBXEeMmBE

Entry address:

0x10C0

Entry point:

81, EC, 44, 04, 00, 00, 53, 55, 56, 57, E8, 61, FF, FF, FF, 6A, 01, 68, 00, 10, 40, 00, FF, 15, 38, 20, 40, 00, 8B, 35, 34, 20, 40, 00, 33, DB, 53, 33, ED, BF, 10, 27, 00, 00, 88, 5C, 24, 70, FF, D6, 83, C8, 01, 50, FF, D6, FF, 15, 30, 20, 40, 00, 8B, FF, 8A, 08, 80, F9, 20, 74, 05, 80, F9, 09, 75, 03, 40, EB, F1, 8A, 08, 80, F9, 22, 75, 1F, 8A, 48, 01, 40, 3A, CB, 74, 0F, 8B, FF, 80, F9, 22, 74, 0D, 8A, 48, 01, 40, 3A, CB, 75, F3, 80, 38, 22, 75, 20, 40, EB, 1D, 3A, CB, 74, 19, 8D, A4, 24, 00, 00, 00, 00... 
[+]

Entropy:

6.5041

Packer / compiler:

Nullsoft install system v2.x

Code size:

1024 Bytes (1,024 bytes)

Scan SALSPAWN.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.