home

cadwin.exe

AppliCad Modeller

AppliCad Australia

Publisher:
AppliCad Australia

Product:
AppliCad Modeller

Description:
cadwin

Version:
6.0

MD5:
a889536a80ee839a975a47d3744f14f2

SHA-1:
fd09c8ab32cf93f27b1169dbc047296e810d829d

SHA-256:
cb35850bb70d06570dc048164f771149b57764b3ccbc60463ebf92c6db40d6c3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 4:34:19 PM UTC  (today)

File size:
4.1 MB (4,312,576 bytes)

Product version:
6.0 27-March 2013

Copyright:
Copyright © 2013

Original file name:
cadwin.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\cadwin.exe

File PE Metadata
Compilation timestamp:
11/24/2014 10:08:17 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:I3bOB89jYK9M6q8kFWsiPX8EZ3RmDd8LlWhUfn5pt2x5QYesiFjTmCRor5TGlZEN:I328O1iPX33RPlWy5pt2x58XFjTVRlZg

Entry address:
0x34A306

Entry point:
E8, D6, 26, 01, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 6A, 0A, 6A, 00, FF, 75, 08, E8, 7B, FA, FF, FF, 83, C4, 0C, 5D, C3, 8B, FF, 55, 8B, EC, 5D, E9, DF, FF, FF, FF, 6A, 0C, 68, F0, D7, 79, 00, E8, E7, 27, 00, 00, 33, C0, 33, F6, 39, 75, 08, 0F, 95, C0, 3B, C6, 75, 1D, E8, 9A, FD, FF, FF, C7, 00, 16, 00, 00, 00, 56, 56, 56, 56, 56, E8, 6A, B3, FF, FF, 83, C4, 14, 83, C8, FF, EB, 5F, E8, CF, C8, 00, 00, 6A, 20, 5B, 03, C3, 50, 6A, 01, E8, DA, C9, 00, 00, 59, 59, 89, 75, FC, E8, B8, C8, 00, 00, 03, C3...
 
[+]

Entropy:
6.6154

Code size:
3.4 MB (3,578,880 bytes)

The file cadwin.exe has been seen being distributed by the following URL.

ftp://update.roofestimating.com/cadwin.exe

Scan cadwin.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.