» KLAstrPwdView.exe
Overview
Analysis
File Details

KLAstrPwdView.exe

Asterisks Password Viewer

Serhiy Horobets

File name:

KLAstrPwdView.exe

Publisher:

Keylack Software (signed by Serhiy Horobets)

Product:

Asterisks Password Viewer

Version:

3.16.102.0

MD5:

93e1139fc0bbf3862f50dedbc853e7ff

SHA-1:

ae26a9e7b706e7488ce59406554834a9624458a1

SHA-256:

936b8a380ad25b833e97ed99f92db5608980fcf6e432e8c732fcc85464de9d1f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 3:24:51 AM UTC (today)

File size:

2.7 MB (2,793,536 bytes)

Product version:

3.16.102.0

Original file name:

KLAstrPwdView.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\appdata\roaming\asterisks password viewer\install\3.16.102\430a33c\klastrpwdview.exe

Digital Signature

Signed by:

Serhiy Horobets

Authority:

COMODO CA Limited

Valid from:

6/12/2013 3:00:00 AM

Valid to:

6/13/2014 2:59:59 AM

Subject:

CN=Serhiy Horobets, O=Serhiy Horobets, STREET=Sechenova st. 7a - 38, L=Kiev, S=Kiev, PostalCode=03127, C=UA

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00896DBAF0536290A84AFCF077BF3B9614

File PE Metadata

Compilation timestamp:

2/22/2014 12:54:29 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

49152:Vn7YT/QZqCmVCYIgLbJ+4E/8xPt3XV6l5nAkGZQxaU8IlHGO0oDfuIM:p7YT/QZRmPIg/J+4E/8DXMl5nAkGZQxQ

Entry address:

0x27BD16

Entry point:

E9, FD, 93, FF, FF, 3C, ED, C3, 0E, AF, 8B, 49, 49, 3A, D6, 31, 80, 70, A5, 69, 5E, 9E, 37, 00, 00, 22, 27, 48, D9, DE, 04, 6F, 4C, BD, 8E, 1A, 08, 08, 69, 7D, 4A, 75, EA, 61, 87, 04, 24, 58, 89, 2C, 24, 8B, EC, E9, F1, EA, FE, FF, 87, 04, 24, 8B, 04, 24, 6A, 00, E8, 07, 21, 00, 00, E9, 49, FC, FF, FF, C6, 00, C3, 68, CD, 3B, 67, 00, E9, B4, 15, FF, FF, 81, C1, 74, E1, 57, 22, 89, 01, 59, E8, E8, 50, FE, FF, E9, 94, E8, FF, FF, C1, C3, 1E, 89, 5F, 08, 8B, 1F, 89, 5F, 04, E8, 8C, D6, FF, FF, E9, 32, 89, FF... 
[+]

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

1.4 MB (1,417,728 bytes)

Scan KLAstrPwdView.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.