home

5024_textut.exe

Compression Plus v4.0

MicroHelp, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from cad.pl.
Publisher:
MicroHelp, Inc.

Product:
Compression Plus v4.0

Description:
Compression Plus v4.0 Self-Extracting EXE

Version:
4.00.005

MD5:
ca2358726849d8674611ff5d726aa0b6

SHA-1:
53d160865fbe31430271af253119af178c018e87

SHA-256:
b4247b911c034992a07e5c8ae5a30575cee7f0eb2e405e7e31a4c7ce2db97b48

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/27/2025 12:48:42 PM UTC  (today)

File size:
24 KB (24,624 bytes)

Product version:
4.00.005

Copyright:
Copyright © MicroHelp, Inc. 1995

Trademarks:
Compression Plus is a trademark of EllTech Development, Inc.

Original file name:
SFXCORE

File type:
Executable application (Win16 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\5024_textut.exe

File PE Metadata
OS version:
92.15359

OS bitness:
Win16

Subsystem:
Windows GUI

Linker version:
2.0

CTPH (ssdeep):
384:MhFdZvsJXtvN+jjUiUDI5xNnL2I4h0SWSEgSqwq2wHLdPqqvg:MhVvJUxkJqI4mSHE5q2Kg

Entry address:
0xFB00F5

Entry point:
4D, 5A, EF, 00, 03, 00, 00, 00, 20, 00, 00, 00, FF, FF, 07, 00, 00, 01, 65, 40, 00, 00, 00, 00, 40, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
192 KB (196,610 bytes)

The file 5024_textut.exe has been seen being distributed by the following URL.

http://cad.pl/component/downloads/download/.../134-text-utilities.html

Scan 5024_textut.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.