» trueinstall.exe
Overview
Analysis
File Details
Programs (1)

trueinstall.exe

Esaya.com Inc.

File name:

trueinstall.exe

Publisher:

Esaya.com Inc. (signed and verified)

MD5:

b1c2667bdd1caa5451a318715a8c16d7

SHA-1:

31bafd300d9f49296d5d3aa0657bbe6564f0af57

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

5/7/2024 11:07:06 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Norman

W32/Obfuscated.EI!genr

11.20140125

File size:

185.6 KB (190,072 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\windows\trueinstall.exe

Digital Signature

Signed by:

Esaya.com Inc.

Authority:

VeriSign, Inc.

Valid from:

5/17/2006 8:00:00 PM

Valid to:

5/17/2009 7:59:59 PM

Subject:

CN=Esaya.com Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Esaya.com Inc., L=New York, S=New York, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

244A552C72B65C01E472D28722707D5A

File PE Metadata

Compilation timestamp:

12/26/2006 6:36:04 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

1536:f7EEd5G99xUx3veJxOiMmKTYx7Ua9MgHTOlgM3wQNeS5t25NoetR9tRG5REQRGqD:fYEcGheJxOP0Ol3wQht25bRTv+F

Entry address:

0x90B9

Entry point:

E8, 05, 47, 00, 00, E9, 16, FE, FF, FF, 8B, C1, 8B, 4C, 24, 04, C7, 00, B8, 33, 41, 00, 8B, 09, 83, 60, 08, 00, 89, 48, 04, C2, 08, 00, 53, 8B, 5C, 24, 08, 56, 8B, F1, C7, 06, B8, 33, 41, 00, 8B, 43, 08, 89, 46, 08, 85, C0, 8B, 43, 04, 57, 74, 31, 85, C0, 74, 27, 50, E8, 0F, EA, FF, FF, 8B, F8, 47, 57, E8, 7D, FB, FF, FF, 85, C0, 59, 59, 89, 46, 04, 74, 18, FF, 73, 04, 57, 50, E8, 3A, 47, 00, 00, 83, C4, 0C, EB, 09, 83, 66, 04, 00, EB, 03, 89, 46, 04, 5F, 8B, C6, 5E, 5B, C2, 04, 00, 83, 79, 08, 00, C7, 01... 
[+]

Entropy:

5.6390

Code size:

72 KB (73,728 bytes)

The file trueinstall.exe has been discovered within the following program.

AOL® Easy Transfer Wizard by AOL Inc.

Publisher's description - “AOL Easy Transfer offers you a quick and easy way to switch to your new AOL account. It automatically copies your personal data to your new AOL email account and notifies your friends with the new email address.”

secure5.trueswitch.com/aolweb

9% remove it

Scan trueinstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.