» setup_50903_full_universal.exe
Overview
Analysis
File Details
Behaviors (1)

setup_50903_full_universal.exe

Grawmet 5

Noris Group GmbH

This is the uninstaller utility registered in the Windows Control Panel for the program Grawmet 5 by GRAW Radiosondes GmbH & Co. KG.

File name:

Publisher:

GRAW Radiosondes GmbH & Co. KG (signed by Noris Group GmbH)

Product:

Grawmet 5

Description:

Grawmet 5

Version:

5.9.3.3

MD5:

cceefb8915f9d47ad9dc22963429e153

SHA-1:

422346217bb314127610d47fa95196af00cb3228

SHA-256:

31fb121151b070fb4bf2583f81a73da42d3e560df1b0d1b0dd0620493b74cc4a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 9:13:13 PM UTC (today)

File size:

6.2 MB (6,528,520 bytes)

Product version:

5.9.3.3

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\{bc06855b-95a7-4086-bab0-38c89cf38fdf}\setup_50903_full_universal.exe

Digital Signature

Signed by:

Noris Group GmbH

Authority:

Thawte, Inc.

Valid from:

2/17/2013 4:00:00 PM

Valid to:

2/18/2015 3:59:59 PM

Subject:

CN=Noris Group GmbH, O=Noris Group GmbH, L=Nürnberg, S=Bayern, C=DE

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

3BDC737BF1915E3F28166625E132CB6D

File PE Metadata

Compilation timestamp:

1/29/2014 3:04:52 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:yBCWJvXZK0COmVbcEkT/THDXPaV0L8l4AWn1eyeHb3H28P4P6eK13icjqsNTUOJA:yIWJfZK7cEkT/TuV0hZsjHhFFA

Entry address:

0x42D304

Entry point:

55, 8B, EC, B9, 29, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, 90, 87, 81, 00, E8, 1F, 05, BE, FF, 33, C0, 55, 68, D8, EE, 82, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, 34, D4, 82, 00, 64, FF, 30, 64, 89, 20, C7, 05, 3C, 8B, 85, 00, 14, 01, 00, 00, 68, 3C, 8B, 85, 00, E8, BF, 45, BE, FF, E8, 1A, A3, EF, FF, 84, C0, 74, 6B, B2, 01, A1, DC, B6, 47, 00, E8, 3E, 04, C5, FF, 8B, D8, BA, 00, 00, 00, 80, 8B, C3, E8, 18, 05, C5, FF, 8D, 55, E4, 33, C0, E8, FE, 79, BD, FF, 8B, 45, E4, 8D, 55, E8... 
[+]

Entropy:

6.5312

Developed / compiled with:

Microsoft Visual C++

Code size:

4.2 MB (4,383,232 bytes)

Program Uninstaller

Program name:

Grawmet 5

Display publisher:

GRAW Radiosondes GmbH & Co. KG

Display version:

5.9.3.3

Uninstall string:

"C:\ProgramData\{BC06855B-95A7-4086-BAB0-38C89CF38FDF}\Setup_50903_Full_Universal.exe" REMOVE=TRUE MODIFY=FALSE

Scan setup_50903_full_universal.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.