home

glaztv-setup.exe

OOO Online Center

This is a setup and installation application. The file has been seen being downloaded from programmas.ru and multiple other hosts.
Publisher:
OOO Online Center  (signed and verified)

MD5:
4857e405a29156e03e5b221e51d2c705

SHA-1:
f7ec3b377c5c305406ad35dc72667196eef6bba4

SHA-256:
b85c7ea362f7a256b99f9f6fadc47ebb8f93b58e8f4bfc9aad0ebf1f06ed4d8a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 8:20:39 AM UTC  (today)

File size:
3 MB (3,110,880 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\glaztv-setup.exe

Digital Signature
Signed by:
OOO Online Center

Authority:
Thawte, Inc.

Valid from:
11/11/2013 3:00:00 AM

Valid to:
2/11/2016 2:59:59 AM

Subject:
CN=OOO Online Center, O=OOO Online Center, L=Yaroslavl, S=Yaroslavl, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4945BBB8ACAA7493A28ADEA6404F38DB

File PE Metadata
Compilation timestamp:
1/28/2015 3:23:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:3ncyoXSAS7nDFEKpiDoKychvfvSo5VgN3HIn/a6mJ:5mS/ySe/a6y

Entry address:
0x442FC

Entry point:
55, 8B, EC, B9, 05, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, 30, 13, 44, 00, E8, 5B, 57, FC, FF, BF, 88, C1, 44, 00, 33, C0, 55, 68, 84, 45, 44, 00, 64, FF, 30, 64, 89, 20, 68, 94, 45, 44, 00, 6A, FF, 6A, 00, E8, 02, 5A, FC, FF, E8, A5, 5A, FC, FF, 3D, B7, 00, 00, 00, 75, 18, 6A, 10, 68, E4, 45, 44, 00, 68, 00, 46, 44, 00, 6A, 00, E8, 17, 5C, FC, FF, E9, 0B, 02, 00, 00, 68, 78, BF, 44, 00, 68, 04, 01, 00, 00, E8, 2B, 5B, FC, FF, 8D, 45, EC, BA, 78, BF, 44, 00, B9, 05, 01, 00, 00, E8, 45...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
267.5 KB (273,920 bytes)

The file glaztv-setup.exe has been seen being distributed by the following 5 URLs.

http://programmas.ru/GlazTV-Setup.exe

http://besplatnyeprogrammy.ws/go/.../GlazTV-Setup.exe

http://www.glaz.tv/GlazTV-Setup.exe

http://fileshare1030.dfiles.ru/auth-14498413252aef37e6b54e4a9d63547b-37.131.222.76-2388863577-163217653-guest/.../GlazTV-Setup.exe

http://glaz.tv/GlazTV-Setup.exe

Scan glaztv-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.