home

KASS.EXE

Sassafras K2

Sassafras Software Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘KeyAccess’.
Publisher:
Sassafras Software Inc.  (signed and verified)

Product:
Sassafras K2

Description:
KeyAccess Messager for Windows (64-bit)

Version:
7.0.1.7

MD5:
1ae40eda52db27d8d2eddf62004034cf

SHA-1:
44fe2ecc02659e685975287a911d748045e0f28d

SHA-256:
16de35f6a8f8fdce901b4a7b0ded9240ae5edaa75c46a114a61e5b25ed6c1607

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 6:13:47 PM UTC  (today)

File size:
169.6 KB (173,688 bytes)

Product version:
7.0

Copyright:
(c)1990-2013 Sassafras Software Inc.

Trademarks:
Sassafras, KeyServer, and KeyAccess are registered trademarks of Sassafras Software Inc.

Original file name:
KASS.EXE

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\windows\kass.exe

Digital Signature
Signed by:
Sassafras Software Inc.

Authority:
Thawte, Inc.

Valid from:
9/13/2011 8:00:00 PM

Valid to:
11/18/2013 6:59:59 PM

Subject:
CN=Sassafras Software Inc., OU=Secure Application Development, O=Sassafras Software Inc., L=Hanover, S=New Hampshire, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1FDCCBE1D1D91EAF5867340108068371

File PE Metadata
Compilation timestamp:
5/29/2013 9:04:19 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x1C780

Entry point:
48, 89, 5C, 24, 10, 57, 48, 83, EC, 30, FF, 15, 58, 4A, 00, 00, 48, 8D, 54, 24, 40, 48, 8B, C8, FF, 15, FA, 4A, 00, 00, 48, 85, C0, 48, 8B, D8, 74, 58, 83, 7C, 24, 40, 01, 7E, 51, 4C, 8B, 40, 08, 48, 8D, 3D, 28, 58, 00, 00, 41, 83, C9, FF, 33, D2, 33, C9, C7, 44, 24, 28, FF, FF, FF, FF, 48, 89, 7C, 24, 20, FF, 15, 3D, 49, 00, 00, 83, F8, 02, 75, 26, FF, 15, 0A, 4A, 00, 00, 48, 8B, D7, 48, 8B, C8, E8, 67, 21, 00, 00, 8B, 4C, 24, 40, 48, 8D, 53, 10, 83, C1, FE, 4C, 8B, C0, E8, 24, 16, 00, 00, EB, 37, B9, F5...
 
[+]

Entropy:
6.3621

Code size:
125.5 KB (128,512 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
KeyAccess

Command:
kass.exe


Scan KASS.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.