ask.fm Accountcreator.exe

ask.fm Accountcreator

This is a setup program which is used to install the application. The file has been seen being downloaded from download790.mediafire.com.
Product:
ask.fm Accountcreator

Version:
1.0.0.0

MD5:
46347d75f02c500841dd4f16c062e52a

SHA-1:
df202dff200b25a2166bbee5799110e04daf5af3

SHA-256:
a8d564cc33516f55e30ee3eb40295766adaa7bdfbdb736af0c4ef359e28b90cb

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/26/2024 4:09:48 PM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.7.5.0

Qihoo 360 Security
HEUR/Malware.QVM03.Gen
1.0.0.1015

File size:
57.5 KB (58,880 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
ask.fm Accountcreator.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ask.fm accountcreator.exe

File PE Metadata
Compilation timestamp:
6/25/2014 8:44:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:9Lrv6lw+Iql0EISWCFQ/OwgsRTOyLCUbD2SK+wKcB+1xM2XPgFl9MyhkBmw:9ylwJAbWQwgnyDbinkcB+c2f2aT

Entry address:
0xCD7E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
43.5 KB (44,544 bytes)

The file ask.fm Accountcreator.exe has been seen being distributed by the following URL.

Scan ask.fm Accountcreator.exe - Powered by Reason Core Security