catalinasavingsprinter.exe.inc

Catalina Marketing Corp.

The file catalinasavingsprinter.exe.inc by Catalina Marketing has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Catalina Marketing Corp.  (signed and verified)

MD5:
79da170646957efc00340d87012d1903

SHA-1:
d85d36ce6f095737c42c5bfd311cbda56807361a

SHA-256:
dfc71a0f0490bb07e9ae46caa5bd8158a5f6bfba9441ab5f6285e068c8536f62

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/24/2024 9:54:51 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Catalina.CatalinaMarketingCorp (M)
16.2.17.10

File size:
3.7 MB (3,834,608 bytes)

Common path:
C:\users\{user}\downloads\catalinasavingsprinter.exe.inc

Digital Signature
Authority:
Thawte, Inc.

Valid from:
6/3/2013 5:00:00 PM

Valid to:
6/23/2015 4:59:59 PM

Subject:
CN=Catalina Marketing Corp., OU=Catalina Marketing Corp., O=Catalina Marketing Corp., L=Saint Petersburg, S=Florida, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0A236906277CCA1D180B2EC92A3F5D7D

File PE Metadata
Compilation timestamp:
11/1/2011 10:08:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:2uDql6Df02JovX+ftv4Nj0mGaTUrWzzRRDuFmLVyJ6jnFghwCLSPUS:UGc2JO+f3mF1zzRFcmx08FbKS5

Entry address:
0x6A96B

Entropy:
6.9932

Code size:
696.5 KB (713,216 bytes)

Remove catalinasavingsprinter.exe.inc - Powered by Reason Core Security