Gridinsoft Logo
File Icon

The betterbird-128.12.0esr-bb30.en-US.win64.installer.exe (Betterbird) File Analysis

Technical Analysis

File Name betterbird-128.12.0esr-bb30.en-US.win64.installer.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Scanner Version 1.0.219.174
Database Version 2025-07-05 00:00:29 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
64,421,568
File Size (bytes)
2025-07-05
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
fbba8f740d15108a63279fe79de5c46f
SHA1
90d4ec11c4281a7dc2758fd13c7f4dc6750865e8
SHA256
4638d28c8ea8ce941bf45ece2b9a8c6b7067014276c42e054b5d7516fe07a8bb
SHA512
4147518577f66fbcc900c02134db48f6a4a8d0a9ee582968faf0290a39802f9312ae1c3b5e14b013401192eaebecf9d9f10acf266181ec2530da513f2a1a71ea
ImpHash
05d3dce2be32df01ca249872dd2cc117

PE Analysis

Basic Information

Icon
Hash: 09d89f97aea7ca759e1350f8fb096a76
Fuzzy: 03c6cafb2b3c92cf1e298cdd471ad060
dHash: f0e8cc65652b96e8
Image Base 0x00400000
Entry Point 0x0042e2f0
Compilation Time 2018-08-30 22:18:33
Checksum 0x03d74d11 (Actual: 0x03d74d11)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Digital Signature Chain verification from CN=Betterbird Project (serial:57383287222863997455287740968952931114, sha1:70da27de8d2c21fe55a9cfed259d7a2790b8a9bd) failed: The X.509 certificate provided is self-signed - "Common Name: Betterbird Project"
Imports 2 libraries
KERNEL32, MSVCRT
Exports 0 functions
Resources 12 Resources
Sections 3 Sections

Version Information

CompanyName Betterbird Project
FileDescription Betterbird
FileVersion 18.05
InternalName 7zS.sfx
LegalCopyright Betterbird Project
OriginalFilename 7zS.sfx.exe
ProductName Betterbird
ProductVersion 18.05
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 122,880 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x0001f000 65,536 bytes 62,976 bytes 7.90 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 650278848F692EBAC67A88327CA4D982
.rsrc 0x0002f000 40,960 bytes 40,448 bytes 7.10 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 570373851B31CD4F0CB39FAD195B7571
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 12 (39,967 bytes)
Resource Type Count Total Size Percentage
RT_ICON 4 37,296 bytes
93.3%
RT_DIALOG 1 184 bytes
0.5%
RT_STRING 4 368 bytes
0.9%
RT_GROUP_ICON 1 62 bytes
0.2%
RT_VERSION 1 692 bytes
1.7%
RT_MANIFEST 1 1,365 bytes
3.4%

Certificate Chain Analysis

Certificate Information
Product Betterbird
Description Betterbird
File Version 18.05
Original Name 7zS.sfx.exe
Signing Date 10:42 AM 06/29/2025 (5 days ago)
Verification Status A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
Signers Betterbird Project
Internal Name 7zS.sfx
Copyright Betterbird Project
Certificate Chain Summary
Betterbird Project #1 Primary
Validity Period: 2024-07-25 21:39:55 → 2027-07-25 21:49:56
Signature Algorithm: sha256RSA
Serial Number: 2B 2B 9E 7E 73 72 F7 BC 4F FD 21 D4 38 A0 23 2A
DigiCert Trusted Root G4 #2 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #3 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Timestamp 2024 #4 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

Chain verification from CN=Betterbird Project (serial:57383287222863997455287740968952931114, sha1:70da27de8d2c21fe55a9cfed259d7a2790b8a9bd) failed: The X.509 certificate provided is self-signed - "Common Name: Betterbird Project"

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware