What is app.asar --nod?

jerzy@jerzy:~$ sudo netstat -tupln
[sudo] password for jerzy: 

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name    
tcp        0      0   O.0.0.0:*   LISTEN    1798/app.asar --nod 
  • I'm guessing -nod is a truncated string that should be --node and then possibly something else. You can get more information using ps on the reported PID: ps -p 1798. Also, does the output actually say O.0.0.0:* (with an O, "ooh")? – Kusalananda Apr 11 '19 at 10:17
  • ps -p 1798 returned : 1798 ? 00:00:31 scatter As you can see the name of the programme (scatter) is totally unrelated to app.asar --nod (in the statistics from my netstat) Why so? – Jerzy Brzóska Apr 11 '19 at 10:20
  • Yes, the output does say* The programme in question is scatter ( get-scatter.com/download ) – Jerzy Brzóska Apr 11 '19 at 10:29

If you google for scatter and app.asar, you'll find references to ScatterDesktop, which seems to be a digital signature provider for crypto currencies.

So if you're using an Ethereum wallet or similar stuff, the process probably belongs to that. Otherwise, someone else has installed it on your computer and you should treat the machine as compromised and unsuitable to use with any critical data.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.