home

BelkinRouterMonitor.exe

Belkin Tray Application

Affinegy, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘InstaLAN’.
Publisher:
Affinegy, Inc.  (signed and verified)

Product:
Belkin Tray Application

Version:
4.0.3.19849

MD5:
970f49e4981a12344f436203ef9cd9d0

SHA-1:
21f47e435ce4def56dbdfbd11a80a09cb9a9cef9

SHA-256:
289842f8812046f994c09b2f964756859a8871af7a94735aea926e7ce8244a3d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:37:57 PM UTC  (today)

File size:
1.4 MB (1,501,080 bytes)

Product version:
4.0.3.19849

Copyright:
(c) Affinegy, Inc. All rights reserved.

Original file name:
BelkinRouterMonitor.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\belkin\router setup and monitor\belkinroutermonitor.exe

Digital Signature
Signed by:
Affinegy, Inc.

Authority:
VeriSign, Inc.

Valid from:
2/3/2010 8:00:00 AM

Valid to:
2/4/2011 7:59:59 AM

Subject:
CN="Affinegy, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Affinegy, Inc.", L=Austin, S=Texas, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3515EAF35930E0C015DA1F488D4F1E02

File PE Metadata
Compilation timestamp:
8/24/2010 10:15:29 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:gTniZuphl2FKVWScJbkv2EE8vEFSuXUQ/i6OM7eCwxQFvM:geZup+8Qdd8oSuXUQ/i6OM7eB0vM

Entry address:
0x56539

Entry point:
E8, 30, 05, 00, 00, E9, D7, FC, FF, FF, CC, FF, 25, 00, 21, 46, 00, FF, 25, FC, 20, 46, 00, FF, 25, F8, 20, 46, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 50, D0, 54, 00, 89, 0D, 4C, D0, 54, 00, 89, 15, 48, D0, 54, 00, 89, 1D, 44, D0, 54, 00, 89, 35, 40, D0, 54, 00, 89, 3D, 3C, D0, 54, 00, 66, 8C, 15, 68, D0, 54, 00, 66, 8C, 0D, 5C, D0, 54, 00, 66, 8C, 1D, 38, D0, 54, 00, 66, 8C, 05, 34, D0, 54, 00, 66, 8C, 25, 30, D0, 54, 00, 66, 8C, 2D, 2C, D0, 54, 00, 9C, 8F, 05, 60, D0, 54, 00, 8B, 45, 00, A3...
 
[+]

Entropy:
6.3730

Code size:
387 KB (396,288 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
InstaLAN

Command:
"C:\Program Files\belkin\router setup and monitor\belkinroutermonitor.exe" startup


Scan BelkinRouterMonitor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.