home

shtisel.s02.720p.sweet-star.silverline.exe

Google Chrome

Daniel Atallah

The executable shtisel.s02.720p.sweet-star.silverline.exe has been detected as malware by 11 anti-virus scanners.
Publisher:
Google Inc.  (signed by Daniel Atallah)

Product:
Google Chrome

Version:
46.00.2490

MD5:
690da328c2cb42f9bcc7d53784cfd22c

SHA-1:
6448e251465654d2aa2995414a893af992cc9893

SHA-256:
a6a250525ddfdc6da19d24c911149775a2387bb0556acdb3c0d16c2b9bf4ed1d

Scanner detections:
11 / 68

Status:
Malware

Analysis date:
12/25/2024 5:03:42 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Dropper-gen [Drp]
160518-2

Bkav FE
HW32.Packed
1.3.0.7383

Dr.Web
Trojan.PWS.Stealer.15081
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Symmi.63413
11.5.0.6191

ESET NOD32
Win32/Spatet.I trojan
8.0.319.0

F-Secure
Variant.Symmi.63413
5.15.96

Kaspersky
Trojan.Win32.Scar
15.0.0.562

Microsoft Security Essentials
Threat.Undefined
1.223.1545.0

Norman
Gen:Variant.Symmi.63413
19.05.2016 01:04:49

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1077

VIPRE Antivirus
Threat.4150696
49632

File size:
414 KB (423,976 bytes)

Product version:
46.00.2490

Original file name:
chrome.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\shtisel.s02.720p.sweet-star.silverline\shtisel.s02.720p.sweet-star.silverline.exe

Digital Signature
Signed by:
Daniel Atallah

Authority:
StartCom Ltd.

Valid from:
9/11/2014 10:36:56 AM

Valid to:
9/11/2016 11:37:54 AM

Subject:
E=datallah@pidgin.im, CN=Daniel Atallah, L=Holland, S=Michigan, C=US

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
1015

File PE Metadata
Compilation timestamp:
12/6/2015 4:08:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:t97FUPJhye8O5mF45vmwSuxEaYgSVTrnj+uSzY9JFAK62SJ2RMR6RM:t9FUhh18B6Jx1YgmTHwK62SJ2Re

Entry address:
0x11B0

Entry point:
68, B8, C4, 45, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 59, 35, AE, CD, 1B, 2A, D4, 48, 85, 8A, 08, 93, 38, 99, 80, 72, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 76, 62, 34, 70, 72, 6F, 6A, 65, 63, 74, 56, 62, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 04, 76, 16, E9, FF, 79, F6, 9C, 4F, BF, D9, 32, B8, 06, A0, 24, CD, FE, 29, 64, FE, 1A, 47, 70, 4E, 91, EF, 49, F7, 85, BA, E4, 2B, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.9827

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
392 KB (401,408 bytes)

Remove shtisel.s02.720p.sweet-star.silverline.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.