Fragenkatalog.exe

Fragenkatalog

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Fragenkatalog’.
Scan Fragenkatalog.exe - Powered by Reason Core Security
Product:
Fragenkatalog

Version:
1.0.0.0

MD5:
0c01681f8ae3511e64362d3e83789ac7

SHA-1:
93e59ac72ba660ae3518fd95ea2f2093b9f3f5f8

SHA-256:
dbb4ccf4e89d74a9b07603668ab8fb9938a870c6813ad4b4601ac4271e72ebf7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/8/2016 9:16:12 PM UTC  (today)

File size:
4.5 MB (4,667,392 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2012

Original file name:
Fragenkatalog.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\apps\2.0\kq1aobva.40b\1tvwma72.157\frag..tion_0000000000000000_0001.0000_8553949fd0d0ac2c\fragenkatalog.exe

File PE Metadata
Compilation timestamp:
9/12/2012 11:08:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:rKS8iKhmoiNIH3bsvMc/mK4heY7jAiDq+aVZ7Ix:jKt+IXbN4mPeWq3rc

Entry address:
0x455A6E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
4.3 MB (4,537,344 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Fragenkatalog

Command:
"C:\users\{user}\appdata\local\apps\2.0\kq1aobva.40b\1tvwma72.157\frag..tion_0000000000000000_0001.0000_8553949fd0d0ac2c\fragenkatalog.exe" -silent


Scan Fragenkatalog.exe - Powered by Reason Core Security