home

PropMgrAsync.exe

TODO:

Abingerdale, Ltd

The application PropMgrAsync.exe, “TODO: <File description>” by Abingerdale has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
TODO: <Company name>  (signed by Abingerdale, Ltd)

Product:
TODO: <Product name>

Description:
TODO: <File description>

Version:
1.0.0.1

MD5:
aca0f2a5e5690672ef0f289500482cea

SHA-1:
f61e16fbba13b73aec365a6812eacc8df6d63cf5

SHA-256:
69e48b57a83ce5a5856fc4a9a0041db56cc60e8e74965c375f1f9e19ff6d2f30

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/7/2024 5:09:43 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Abingerdale (M)
16.2.11.15

File size:
1 MB (1,080,640 bytes)

Product version:
1.0.0.1

Copyright:
TODO: (c) <Company name>. All rights reserved.

Original file name:
PropMgrAsync.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\streaming busca mp3 toolbar\propmgrasync.exe

Digital Signature
Signed by:
Abingerdale, Ltd

Authority:
VeriSign, Inc.

Valid from:
1/20/2010 9:00:00 PM

Valid to:
1/21/2011 8:59:59 PM

Subject:
CN="Abingerdale, Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Abingerdale, Ltd", L=London, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
211F593FC22BE0D9BAA634CBB188F8C6

File PE Metadata
Compilation timestamp:
3/1/2010 4:54:56 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:0BRsaGObuuQTPU50RbdJcAMKQprTrgG3y5jOMZH7ktPmyxnEGmAvpmf3FBQt:0rzMPU2/azlTLYOM5ydVhKot

Entry address:
0x65C4B

Entry point:
E9, 00, E9, 06, 00, E9, 6B, 9E, 00, 00, E9, 76, F6, 01, 00, E9, D1, 85, 07, 00, E9, 2C, FC, 01, 00, E9, 37, D5, 05, 00, E9, FC, EF, 0B, 00, E9, 6D, 09, 08, 00, E9, E8, D5, 02, 00, E9, 53, 76, 00, 00, E9, CE, 0A, 0B, 00, E9, 49, D3, 06, 00, E9, 14, D5, 03, 00, E9, 4F, 43, 03, 00, E9, 0A, 29, 02, 00, E9, F5, EF, 05, 00, E9, 00, F3, 06, 00, E9, 4B, 56, 01, 00, E9, B6, 91, 0A, 00, E9, 2D, 91, 05, 00, E9, 8C, E7, 06, 00, E9, 57, 52, 03, 00, E9, F2, 20, 03, 00, E9, 4D, F0, 02, 00, E9, F8, 26, 06, 00, E9, B3, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
815.5 KB (835,072 bytes)

Remove PropMgrAsync.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.