home

asgeir.in.the.silence.alb_10924_i84571457_il345.exe

FlashGet

KASHTAN OOO

The executable asgeir.in.the.silence.alb_10924_i84571457_il345.exe has been detected as malware by 1 anti-virus scanner. This is a setup and installation application and has been known to bundle potentially unwanted software.
Publisher:
Trend Media Corporation Limited.  (signed by KASHTAN OOO)

Product:
FlashGet

Description:
FlashGet Setup

Version:
3.7.0.1203

MD5:
ea3e35da1e4f21cea10ef9c638b37f3b

SHA-1:
4bf5b982dd23aa5323fc6e5008b7d8a97063c5a1

SHA-256:
6094403b1feca77220ec3f2da249c051dfe337ee1081b8ae2d2cfedd68b0753e

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
5/15/2024 10:49:03 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.6.4

File size:
3.8 MB (3,999,960 bytes)

Copyright:
Copyright 2000-2009 Trend Media Corporation Limited.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\asgeir.in.the.silence.alb\asgeir.in.the.silence.alb_10924_i84571457_il345.exe

Digital Signature
Signed by:
KASHTAN OOO

Authority:
Thawte, Inc.

Valid from:
7/5/2015 2:00:00 AM

Valid to:
5/22/2016 1:59:59 AM

Subject:
CN=KASHTAN OOO, O=KASHTAN OOO, L=Naberezhnye Chelny, S=Tatarstan republic, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
468BE39F7FCABE2D4D2D070862DD916B

File PE Metadata
Compilation timestamp:
11/14/2015 11:42:48 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x3BEE53

Entry point:
68, 02, E8, 41, 3D, E8, BB, A4, FD, FF, 00, 00, 00, 4F, 75, 74, 70, 75, 74, 44, 65, 62, 75, 67, 53, 74, 72, 69, 6E, 67, 57, 00, 00, 00, 00, 43, 4C, 53, 49, 44, 46, 72, 6F, 6D, 50, 72, 6F, 67, 49, 44, 00, 40, 85, C6, 89, 45, 08, 66, C1, F0, B7, 8B, C2, 66, 85, D9, C1, E8, 0B, 3A, F6, E9, 71, 91, 00, 00, 00, 00, 00, 43, 72, 65, 61, 74, 65, 46, 69, 6C, 65, 41, 00, 85, C0, E9, 13, 49, 00, 00, 68, 03, F0, A9, 98, E8, 59, A4, FD, FF, 9E, 4D, 9F, C0, 63, BF, BB, 9E, 60, 53, 9C, 97, B9, E0, 08, F2, 42, 63, FA, 5D...
 
[+]

Code size:
3.4 MB (3,533,312 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.