home

CTA36.exe

CTA

Performance Trends Inc

Publisher:
Performance Trends  (signed by Performance Trends Inc)

Product:
CTA

Version:
1.00

MD5:
84421d6d0452942195582e3865a2b32c

SHA-1:
e424af44553f49fcac1fa5905a020cc66c8fd9d6

SHA-256:
74d842ec78adc11e27d021b86ba665922296b3ae4db79d78748b267bc76e2abe

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 7:39:25 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
23.00.65.16106

File size:
753.1 KB (771,168 bytes)

Product version:
1.00

Original file name:
CTA36.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\performance trends\circle track analyzer v3.6\cta36.exe

Digital Signature
Signed by:
Performance Trends Inc

Authority:
Thawte, Inc.

Valid from:
1/7/2011 6:00:00 PM

Valid to:
1/7/2013 5:59:59 PM

Subject:
CN=Performance Trends Inc, O=Performance Trends Inc, L=Livonia, S=Michigan, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3B874D3266D8797236B498D223D5A0A1

File PE Metadata
Compilation timestamp:
2/15/2012 7:23:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:M6MZ4j0EvqRnv7UM7onfRY2LKlfnNU36tDZxhvyGziVsluTcZatRYukTmOgFnnKx:dT0dXGZqgU/vyGUAZaENKUrVtJ

Entry address:
0x1A01C0

Entry point:
EB, 06, 88, 99, 00, 33, 6C, AC, 60, E8, 02, 00, 00, 00, 3C, FD, 5F, 80, EF, 34, 0F, BA, E0, D1, EB, 07, 50, C3, 01, 06, 93, C4, EA, B8, 5D, 78, 01, 00, E8, 06, 00, 00, 00, 1A, 13, 01, 9A, C8, 11, 5E, BD, CB, A2, 5E, 5E, F6, D5, BE, 21, 18, AE, 9C, C1, C1, DD, 1B, FA, B9, AB, 00, 00, 00, 0F, BF, FA, 68, 3E, 97, E6, A2, EB, 00, 5F, E8, 03, 00, 00, 00, 23, E2, B2, 5A, 0F, BC, D8, E8, 07, 00, 00, 00, C0, F3, 64, 72, 3E, A8, 08, 5B, 0A, FB, 85, FD, 0F, A4, C3, 68, 0F, B7, DD, 52, 69, DE, 8F, 01, F4, 7D, 5E, 84...
 
[+]

Entropy:
7.9885  (probably packed)

Code size:
1.5 MB (1,597,440 bytes)

Scan CTA36.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.