× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 216f592f1e1717d5681b7f5f2b14a28a2f0c603b5b73182d7e05eebbe963e9a1
File name: free-serial-port-monitor.exe
Detection ratio: 0 / 57
Analysis date: 2016-04-02 01:35:08 UTC ( 2 years, 3 months ago ) View latest
Antivirus Result Update
Ad-Aware 20160401
AegisLab 20160401
AhnLab-V3 20160401
Alibaba 20160401
ALYac 20160401
Antiy-AVL 20160401
Arcabit 20160401
Avast 20160401
AVG 20160402
Avira (no cloud) 20160402
AVware 20160402
Baidu 20160402
Baidu-International 20160401
BitDefender 20160402
Bkav 20160401
CAT-QuickHeal 20160401
ClamAV 20160402
CMC 20160401
Comodo 20160401
Cyren 20160402
DrWeb 20160402
Emsisoft 20160402
ESET-NOD32 20160402
F-Prot 20160402
F-Secure 20160402
Fortinet 20160401
GData 20160402
Ikarus 20160401
Jiangmin 20160402
K7AntiVirus 20160401
K7GW 20160402
Kaspersky 20160402
Kingsoft 20160402
Malwarebytes 20160402
McAfee 20160402
McAfee-GW-Edition 20160401
Microsoft 20160402
eScan 20160402
NANO-Antivirus 20160401
nProtect 20160401
Panda 20160401
Qihoo-360 20160402
Rising 20160402
Sophos AV 20160401
SUPERAntiSpyware 20160402
Symantec 20160331
Tencent 20160402
TheHacker 20160330
TotalDefense 20160330
TrendMicro 20160402
TrendMicro-HouseCall 20160402
VBA32 20160401
VIPRE 20160402
ViRobot 20160401
Yandex 20160316
Zillya 20160401
Zoner 20160401
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
Authenticode signature block and FileVersionInfo properties
Copyright
Copyright © 2001-2003 by HHD Software

Product HHD Web Package Installer
Original name MSIPackager.exe
Internal name MSIPackager
File version 3, 0, 0, 1
Description HHD Web Package Installer
Signature verification Signed file, verified signature
Signing date 11:50 AM 11/30/2006
Signers
[+] HHD Software Ltd.
Status This certificate or one of the certificates in the certificate chain is not time valid., The revocation status of the certificate or one of the certificates in the certificate chain is unknown., Error 65536 (0x10000), The revocation status of the certificate or one of the certificates in the certificate chain is either offline or stale.
Issuer Thawte Code Signing CA
Valid from 1:00 AM 4/24/2006
Valid to 12:59 AM 5/25/2007
Valid usage Code Signing, 1.3.6.1.4.1.311.2.1.22
Algorithm sha1RSA
Thumbprint 3C6A86EC08DB9514D5456CCEC1693155C3F3B519
Serial number 0C A6 33 EB 54 4E 92 02 11 1E 97 D0 F7 56 A0 0C
[+] Thawte Code Signing CA
Status This certificate or one of the certificates in the certificate chain is not time valid.
Issuer Thawte Premium Server CA
Valid from 1:00 AM 8/6/2003
Valid to 12:59 AM 8/6/2013
Valid usage Client Auth, Code Signing
Algorithm sha1RSA
Thumbprint A706BA1ECAB6A2AB18699FC0D7DD8C7DE36F290F
Serial number 0A
[+] thawte
Status Valid
Issuer Thawte Premium Server CA
Valid from 1:00 AM 8/1/1996
Valid to 12:59 AM 1/1/2021
Valid usage Server Auth, Code Signing
Algorithm md5RSA
Thumbprint 627F8D7827656399D27D7F9044C9FEB3F33EFA9A
Serial number 01
Counter signers
[+] VeriSign Time Stamping Services Signer
Status This certificate or one of the certificates in the certificate chain is not time valid., The revocation status of the certificate or one of the certificates in the certificate chain is unknown., Error 65536 (0x10000), The revocation status of the certificate or one of the certificates in the certificate chain is either offline or stale.
Issuer VeriSign Time Stamping Services CA
Valid from 1:00 AM 12/4/2003
Valid to 12:59 AM 12/4/2008
Valid usage Timestamp Signing
Algorithm sha1RSA
Thumbrint 817E78267300CB0FE5D631357851DB366123A690
Serial number 0D E9 2B F0 D4 D8 29 88 18 32 05 09 5E 9A 76 88
[+] VeriSign Time Stamping Services CA
Status This certificate or one of the certificates in the certificate chain is not time valid.
Issuer Thawte Timestamping CA
Valid from 1:00 AM 12/4/2003
Valid to 12:59 AM 12/4/2013
Valid usage Timestamp Signing
Algorithm sha1RSA
Thumbrint F46AC0C6EFBB8C6A14F55F09E2D37DF4C0DE012D
Serial number 47 BF 19 95 DF 8D 52 46 43 F7 DB 6D 48 0D 31 A4
[+] Thawte Timestamping CA
Status Valid
Issuer Thawte Timestamping CA
Valid from 1:00 AM 1/1/1997
Valid to 12:59 AM 1/1/2021
Valid usage Timestamp Signing
Algorithm md5RSA
Thumbrint BE36A4562FB2EE05DBB3D32323ADF445084ED656
Serial number 00
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2004-05-24 18:42:47
Entry Point 0x00003564
Number of sections 4
PE sections
Overlays
MD5 834f7609a354b916901644567462ae6b
File type data
Offset 29184
Size 2938576
Entropy 8.00
PE imports
GetTempPathA
GetModuleHandleA
HeapFree
GetLocaleInfoA
CreateProcessA
MapViewOfFile
lstrlenA
UnmapViewOfFile
lstrcatA
WaitForSingleObject
DeleteFileA
FreeLibrary
lstrcpyA
HeapAlloc
CloseHandle
CreateFileMappingA
CreateFileA
GetCommandLineA
LoadLibraryA
GetModuleFileNameA
GetProcessHeap
PathAddBackslashA
SendDlgItemMessageA
wsprintfA
EndDialog
SetDlgItemTextA
MessageBoxA
CreateDialogParamA
DialogBoxParamA
ShowWindow
LoadStringA
DestroyWindow
Number of PE resources by type
RT_DIALOG 3
RT_ICON 1
RT_STRING 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
ENGLISH US 7
PE resources
ExifTool file metadata
SubsystemVersion
4.0

InitializedDataSize
18944

ImageVersion
0.0

ProductName
HHD Web Package Installer

FileVersionNumber
3.0.0.1

UninitializedDataSize
0

LanguageCode
English (U.S.)

FileFlagsMask
0x003f

CharacterSet
Unicode

LinkerVersion
7.1

FileTypeExtension
exe

OriginalFileName
MSIPackager.exe

MIMEType
application/octet-stream

Subsystem
Windows GUI

FileVersion
3, 0, 0, 1

TimeStamp
2004:05:24 19:42:47+01:00

FileType
Win32 EXE

PEType
PE32

InternalName
MSIPackager

ProductVersion
3, 0, 0, 1

FileDescription
HHD Web Package Installer

OSVersion
4.0

FileOS
Windows NT 32-bit

LegalCopyright
Copyright 2001-2003 by HHD Software

MachineType
Intel 386 or later, and compatibles

CompanyName
HHD Software

CodeSize
10752

FileSubtype
0

ProductVersionNumber
3.0.0.1

EntryPoint
0x3564

ObjectFileType
Executable application

CarbonBlack CarbonBlack acts as a surveillance camera for computers
Execution parents
Compressed bundles
File identification
MD5 54faee887f3fda330109dfb74ea54ee7
SHA1 4c880d4a20fe19cbcc764dbb0ea9226442b1f557
SHA256 216f592f1e1717d5681b7f5f2b14a28a2f0c603b5b73182d7e05eebbe963e9a1
ssdeep
49152:vTH5oNeOmqvHU2Mfe4QHWP+mI9RntqQRP6ZMSU49F/NHwMrusUC0QEt6wrqN:b5kenqvefeAP+mCCQRCe94DFHwuwQENy

authentihash 802e97d92b5356a5cb88fa1a5e5002a82029c4be038921951737396f6cafd253
imphash 71ab52935bdb61ab2267354b4e2f305b
File size 2.8 MB ( 2967760 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID Win32 Dynamic Link Library (generic) (38.4%)
Win32 Executable (generic) (26.3%)
OS/2 Executable (generic) (11.8%)
Generic Win/DOS Executable (11.6%)
DOS Executable Generic (11.6%)
Tags
peexe overlay signed software-collection

VirusTotal metadata
First submission 2007-04-25 12:55:06 UTC ( 11 years, 2 months ago )
Last submission 2018-06-26 13:21:37 UTC ( 3 weeks, 2 days ago )
File names FREE-SERIAL-PORT-MONITOR.EXE
free-serial-port-monitor[1].exe
free-serial-port-monitor(1).exe
free-serial-port-monitor.exe
34577
free-serial-port-monitor.exe.2.3.
494F54EDD06291E148972D94C83D550088422FC4.exe
free-serial-port-monitor.exe
MSIPackager.exe
Free serial port monitor.exe
freeserialportmonitor.exe
jsea2sra7ym4xtdwjw5q5kjcmrbld5kx.exe
filename
254039E4-D8D1-4C0E-BE5E-E3FE6062FDB7.exe
1283094122-free-serial-port-monitor.exe
free-serial-port-monitor (1).exe
free-serial-port-monitor [1].exe
scan_file
file-3393402_exe
54faee887f3fda330109dfb74ea54ee7
octet-stream
MSIPackager
free-serial-port-monitor.exe
free-serial-port-monitor.exe
042020150200472339_free-serial-port-monitor.exe
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!