не подтвержден 948582.crdownload

PROFI-SOFT

The file не подтвержден 948582.crdownload has been detected as malware by 1 anti-virus scanner.
Publisher:
PROFI-SOFT  (signed and verified)

MD5:
2ce3d1167195568d03f1fcf69f344dad

SHA-1:
6bcdda5e9101d40828b1d4e1a15c51966c58456b

SHA-256:
015b502c13a56ec9000786eac74c257c66ad953545f4e19876e98371e86a8059

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/30/2024 10:03:08 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.12.4

File size:
1004.5 KB (1,028,616 bytes)

Common path:
C:\users\{user}\downloads\не подтвержден 948582.crdownload

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
9/4/2015 3:00:00 AM

Valid to:
9/4/2016 2:59:59 AM

Subject:
CN="""PROFI-SOFT"", OOO", O="""PROFI-SOFT"", OOO", STREET="Prospekt Piskarevsky, 10", L=Saint-Petersburg, S=Saint-Petersburg, PostalCode=195221, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008B0D4FAA82D8B1952898AE54373F0012

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x6E680

Entry point:
90, 90, 90, BE, 0C, 00, 00, 00, 90, 8D, 05, 58, 6F, 47, 00, C7, 00, 66, 68, 31, 30, 68, 58, 6F, 47, 00, E8, A1, FD, FF, FF, 4E, 75, E6, 90, EB, 08, 90, 31, FF, FF, 90, 90, 90, 90, 68, 08, E7, 46, 00, E9, 51, 00, 00, 00, 8B, 4C, 25, 00, 0F, BA, F0, 18, 48, 8B, 44, 25, 04, 8D, AD, 08, 00, 00, 00, F8, 66, F7, C5, 49, 1C, 36, 89, 01, 1B, C7, 8D, B6, FC, FF, FF, FF, D2, FC, 8B, 06, 66, 3B, D3, 66, F7, C6, 2A, 51, 33, C3, 40, F7, D0, F5, F9, F6, C1, 5B, F7, D8, 40, F5, D1, C0, F9, 33, D8, F6, C6, C9, 03, F8, 57...
 
[+]

Code size:
901 KB (922,624 bytes)