home

frontieronlinescanner.exe

Frontier Online Scanner

F-Secure Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from www.frontierhelp.com and multiple other hosts.
Publisher:
F-Secure Corporation  (signed and verified)

Product:
Frontier Online Scanner

Version:
5.0.24.267

MD5:
ec944ed37ef17b5e0d60c509929e9f2d

SHA-1:
7dd5ea820da9638d914df0f2338fcec6e2295d29

SHA-256:
8dd041c749d820dbfa1690b8776d46e858452018d0f8ff50699159e4da170766

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:52:01 AM UTC  (today)

File size:
4.3 MB (4,480,928 bytes)

Product version:
5.0

Copyright:
Copyright © 2013 F-Secure Corporation

Original file name:
fssos.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\frontieronlinescanner.exe

Digital Signature
Signed by:
F-Secure Corporation

Authority:
GlobalSign nv-sa

Valid from:
2/26/2013 4:43:19 AM

Valid to:
2/27/2016 4:43:19 AM

Subject:
CN=F-Secure Corporation, O=F-Secure Corporation, L=HELSINKI, S=Uusimaa, C=FI

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112116EC43FE9E35A1ED36CC601C8E232F26

File PE Metadata
Compilation timestamp:
6/17/2013 12:05:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:dvXgnjkYr8JeagtUwsQ009KSM8Qmvzn0SbTtAXC9EJUymm20V:JgngYIJfMG10AS4Sb2yz/S

Entry address:
0x8FBAA

Entry point:
E8, 94, BC, 00, 00, E9, 17, FE, FF, FF, FF, 74, 24, 04, 51, E8, 89, BD, 00, 00, 59, 59, C2, 04, 00, 51, C7, 01, C0, 60, 50, 00, E8, 08, BD, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, B8, D6, FB, FF, 59, 8B, C6, 5E, C2, 04, 00, FF, 74, 24, 04, 51, E8, E6, BE, 00, 00, 59, 59, C2, 04, 00, 51, E8, 3A, BE, 00, 00, 59, C3, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, 0B, C0, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09...
 
[+]

Entropy:
7.6320

Code size:
972 KB (995,328 bytes)

The file frontieronlinescanner.exe has been seen being distributed by the following 4 URLs.

http://www.frontierhelp.com/securityPC?key=Z3UL-JNK6-7Z8D-V6PL-PKGB

http://www.frontierhelp.com/securityPC?key=02R5-3K7V-2NKG-F6BK-2CVQ

http://go.frontier.com/rdr.asp?t=aAI0K2TA&c=30202x7x

http://ww2.frontierhelp.com/.../FrontierOnlineScanner.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.