home

ast54win.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.astrolog.org.
MD5:
5671f7a6e7f8b6ca922923b9491b4bc1

SHA-1:
ded19f54339f0194ff143e9a40b02d40e11d4e45

SHA-256:
7851791f92f1c5553ed3584f47cf998bd07bcd164b465380f5ae6b8f1d318f84

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 10:41:57 AM UTC  (today)

File size:
592 KB (606,246 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\ast54win.exe

File PE Metadata
Compilation timestamp:
10/27/1997 7:18:28 PM

OS version:
374.1786

OS bitness:
Win64

Linker version:
9.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:5/wqcvptPizjRCea29vsWxuRl8/4J9KLfsxDmJGjAf54qsZQS1kZ:5/wqcvptPiH0evxZd1LfmHjgBU8

Entry address:
0x1CF01C3

Entry point:
4D, 5A, F2, 00, 03, 00, 00, 00, 24, 00, 00, 00, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 01, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 40, 04, 00, 00, 00, 02, 50, 6B, 6C, 69, 74, 65, 28, 52, 29, 20, 43, 6F, 70, 72, 2E, 20, 31, 39, 39, 30, 2D, 31, 39, 39, 36, 20, 50, 4B, 57, 41, 52, 45, 20, 49, 6E, 63, 2E, 20, 41, 6C, 6C, 20, 52, 69, 67, 68, 74, 73, 20, 52, 65, 73, 65, 72, 76, 65, 64, 00, 1D, 01, 5E, 08...
 
[+]

Entropy:
7.9503  (probably packed)

Code size:
384 KB (393,225 bytes)

The file ast54win.exe has been seen being distributed by the following URL.

http://www.astrolog.org/.../ast54win16.exe

Scan ast54win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.