home

icq_download_assist.exe

Download Assist

The application icq_download_assist.exe has been detected as a potentially unwanted program by 3 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from d2nck5wnz9hphu.cloudfront.net.
Product:
Download Assist

Version:
1.3.1.300

MD5:
241b4dc173613d7af0dd0b96534adcad

SHA-1:
bc6a2a04fe1dfb35d35104cf305c7fa613fc31d8

SHA-256:
0d499c1962337d6b0144eed613162271437db81faa9399df7acc28572035e271

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 8:45:16 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
MSIL/DownloadGuide (variant)
8.9190

Reason Heuristics
PUP.Bundler (M)
16.3.13.21

Trend Micro House Call
TROJ_GEN.F47V0602
7.2.11

File size:
436.5 KB (446,968 bytes)

Product version:
1.3.1.300

Copyright:
Copyright © 2012

Original file name:
in.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\icq_download_assist.exe

File PE Metadata
Compilation timestamp:
4/16/2013 6:33:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:LUINZzDjM4Qli4fjSrAPfl9d9ELMrZc7SClur/PflYd9ALMrZcXS7SS:LUIzRQl/EAXjd9ELMu70/Xud9ALMuXpS

Entry address:
0x458F5

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
270.5 KB (276,992 bytes)

The file icq_download_assist.exe has been seen being distributed by the following URL.

http://d2nck5wnz9hphu.cloudfront.net/icq/8.0/de-DE/campaigns/.../ICQ_Download_Assist.exe

Remove icq_download_assist.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.