home

tmasv30-us.exe

Anti-Spyware

Trend Micro, Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from www.trendmicro.com.
Publisher:
Trend Micro Incorporated  (signed by Trend Micro, Inc.)

Product:
Anti-Spyware

Description:
Anti-Spyware Installer

Version:
1.0.0.1

MD5:
277002ac73da2c7688c1800d9232369e

SHA-1:
9cec88264b56519850e2cb1b16eca1ff284f3adc

SHA-256:
c42b6b8abd02121fc06418a4f21bdefaf95652adbc55254f28f21678f63bd21f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:47:53 AM UTC  (today)

File size:
2.2 MB (2,262,376 bytes)

Product version:
1.0.0.1

Copyright:
Copyright (c) 2003-2005 Trend Micro Incorporated. All rights reserved.

Original file name:
SpyInstall.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\tmasv30-us.exe

Digital Signature
Signed by:
Trend Micro, Inc.

Subject:
CN="Trend Micro, Inc.", OU=RD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Trend Micro, Inc.", L=Taipei, S=Taiwan, C=TW

Serial number:
281D63D3579635AF2C0E2ACDE74D9723

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:G4GeLVtV7uVeVJV4VmVQV0VhsU21Ex5rCLJ/6y+NOEN6Y2SSRL/h05QARL9BDYSl:T3wEWLJQNnoB3pvARzDYS5Rx0HNg

Entry point:
B8, 00, 90, 65, 00, 6A, 00, 68, 00, F0, 44, 00, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 66, 9C, 60, 50, 8B, D8, 03, 00, 68, 3C, C4, 01, 00, 6A, 00, FF, 50, 1C, 89, 43, 08, 8B, C3, 03, 00, 68, 70, BC, 00, 00, 6A, 00, FF, 50, 1C, 8B, CC, 8D, A0, 70, BC, 00, 00, 89, 61, 2E, 53, 68, 00, 00, 40, 00, 51, 8B, 7C, 24, 04, 8B, 33, 66, 81, C7, 80, 07, 8D, 74, 1E, 08, 89, 3B, 53, 8B, 5E, 10, B8, 80, 08, 00, 00, 56, 6A, 02, 50, 57, 6A, 28, 6A, 0A, 56, 6A, 04, 50, 57, FF, D3, 83, EE, 08, 59, F3, A5, 59...
 
[+]

Entropy:
7.9803

Packer / compiler:
Petite v2.1 (2)

The file tmasv30-us.exe has been seen being distributed by the following URL.

http://www.trendmicro.com/ftp/products/.../tmasv30-us.exe

Scan tmasv30-us.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.