home

ascentia.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from funcraft-1.as-static.fr and multiple other hosts.
MD5:
494fcd1061795018107893df77385e1a

SHA-1:
65dcadf3559fe1091676631c58fb562b12f3db32

SHA-256:
a5ff63b1ddb87d0ba405368e77e16f71b7788834c469744454297f257b6e1be5

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/25/2024 5:18:08 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.131231

Trend Micro House Call
TROJ_GEN.F47V0822
7.2.2

File size:
813.9 KB (833,424 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ascentia.exe

File PE Metadata
Compilation timestamp:
6/13/2013 3:52:57 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
12288:d8qWlkHNrin7UVfuPWdgMuAuVhON1T2c75VBfU3Z1Wy8dc4iBN:dklkHNC7IyWayuVOf5PfUpWy4if

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, 37, 40, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Entropy:
7.7492

Packer / compiler:
MingWin32

Code size:
18.5 KB (18,944 bytes)

The file ascentia.exe has been seen being distributed by the following 25 URLs.

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=c85367a6c72ee9ec5fb98b3644a7e361b5515244

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=39439edf5da578da299a9670c320ac62f3b0f706

http://download1625.mediafire.com/sd2bmxc8qcsg/.../Ascentia Launcher by MisterPooper21.exe

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=a293b22c3781278bc675c4a2de0fdd657fab8f27

http://download1655.mediafire.com/wranc3te7sdg/.../Ascentia Launcher by MisterPooper21.exe

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=ec99972a4feaf996bc0024815e0ee2054f764852

http://download933.mediafire.com/a9sf25k42qyg/.../Ascentia Launcher by MisterPooper21.exe

http://download984.mediafire.com/saezbcjx4ghg/.../Ascentia Launcher by MisterPooper21.exe

http://download1655.mediafire.com/ra9m2clcg9kg/.../Ascentia Launcher by MisterPooper21.exe

https://bv.csaffluents.qc.ca/filemanager-community/.../&file=Ascentia.exe

http://download1655.mediafire.com/45gv3q4f97ig/.../Ascentia Launcher by MisterPooper21.exe

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=56dd84181c010e870315b2fac5ee9c6c6be47fc0

http://download1655.mediafire.com/pu72h63esklg/.../Ascentia Launcher by MisterPooper21.exe

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=63eae63c161c1fa03086f02cd3da21b713fa9a0b

http://download1655.mediafire.com/ycc8c8c5ggfg/.../Ascentia Launcher by MisterPooper21.exe

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=1e9f0595707eeba810104d4c6ed891dab25f412c

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=5fdb40321a108268609474e611ffb729b39c1db4

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=66f5784575eecc0aee75e9cd2f3a7ba17ec28d68

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=b7f7c90c5a5781996b5be3ea307ddc70fc6eb92d

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=3329b34e9c1bf4638b81f97a816a8a297ef023cb

blob:https://mega.co.nz/1072a50d-2918-419b-8772-2ee4eebc0484

http://download1287.mediafire.com/vec0bbc5eqhg/.../Ascentia Launcher by MisterPooper21.exe

http://funcraft-1.as-static.fr/.../launcher.static.php?type=exe&version=3.0&dl=8784c738f3d03c8b361737de661f838689518b26

http://www.pactify.fr/.../AscentiaLauncher-3.0.exe

http://ascentia.fr/.../Ascentia.exe

Scan ascentia.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.