home

loc00954.exe

InstallAnywhere

Agenzia delle Entrate

This is a self-extracting archive and installer.
Publisher:
Acresso  (signed by Agenzia delle Entrate)

Product:
InstallAnywhere

Description:
InstallAnywhere Self-Extractor

Version:
10, 0, 0, 0

MD5:
e71f6b6aafd8973757f11c9f4bf59948

SHA-1:
fffe3ebfba1b4da638e6ebfdd7fb8f288082c413

SHA-256:
eb8ec43709c1f3a6a65f1f5fe0d97e4459d421f152728f2733aae668c86b3960

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:00:01 AM UTC  (today)

File size:
2.9 MB (3,030,944 bytes)

Product version:
10, 0, 0, 0

Copyright:
(C) 1997-2008 Acresso Software Inc. and/or InstallShield Co. Inc.

Original file name:
iase.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Agenzia delle Entrate

Authority:
Agenzia delle Entrate

Valid from:
3/23/2012 11:01:50 AM

Valid to:
3/23/2015 11:01:50 AM

Subject:
CN=Agenzia delle Entrate - software, OU=Servizi Telematici, O=Agenzia delle Entrate, C=IT

Issuer:
CN=CA Agenzia delle Entrate, OU=Servizi Telematici, O=Agenzia delle Entrate, C=IT

Serial number:
13AFD4

File PE Metadata
Compilation timestamp:
6/12/2009 4:11:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:bMz+xSbINptxbqwHWxTnUoB58TuEh3Wt9n4mE/oQ+4G12GgrbfL3Rs4UotNz/:bMz+UsNfxQFnZ58Tzh3W/n4zoQeEn3BH

Entry address:
0x42250

Entry point:
60, BE, 00, B0, 42, 00, 8D, BE, 00, 60, FD, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA

Code size:
96 KB (98,304 bytes)

The file loc00954.exe has been discovered within the following program.

Entratel  by Sogei S.p.A
Publisher's description - “These services enable consultation of the data present in the Tax Register in relation to one's own identity and accounting situation and presentation of various types of documents provided for (returns, rental contracts, F24 payment forms, declarations of start, variation and termination of VAT business, claims, etc.”
www.sogei.it
About 3% of users remove it
 
Powered by Should I Remove It?

The file loc00954.exe has been seen being distributed by the following URL.

ftp://ftpentratel2.finanze.it/pub/.../LOC00954.exe

Scan loc00954.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.