exe

SISTEM-PRIDZHEKT, OOO

The file exe has been detected as malware by 1 anti-virus scanner.
Publisher:
SISTEM-PRIDZHEKT, OOO  (signed and verified)

MD5:
5f451dade52c05588bb919cfcaedc7cf

SHA-1:
ed88611986ac07d5c3aafeffa880d5e70fe3c74f

SHA-256:
df9b507af99b4b685adefa68143640d62c7d00a901e277541d53a24a20826ef8

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
12/26/2024 7:19:27 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.12.11

File size:
1023 KB (1,047,584 bytes)

Common path:
C:\users\{user}\downloads\exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
9/15/2015 3:00:00 AM

Valid to:
9/15/2016 2:59:59 AM

Subject:
CN="SISTEM-PRIDZHEKT, OOO", O="SISTEM-PRIDZHEKT, OOO", STREET="3 Liter M Pom 2n, ul.Gleba Uspenskogo", L=Saint-Petersburg, S=Saint-Petersburg, PostalCode=196084, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A20A4AB70A4619DB79EDB57AE383ABA7

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x6E664

Entry point:
90, 90, 90, BE, 0C, 00, 00, 00, 90, 8D, 05, B8, 5C, 47, 00, C7, 00, 66, 68, 31, 30, 68, B8, 5C, 47, 00, E8, ED, FD, FF, FF, 4E, 75, E6, 90, EB, 08, 90, 31, FF, FF, 90, 90, 90, 90, 68, EC, E6, 46, 00, E9, D9, FB, FF, FF, FF, 74, 25, 00, 8D, AD, 04, 00, 00, 00, 9D, 66, 15, E1, 7A, 8B, 06, F9, F8, 66, 85, FA, 81, C6, 04, 00, 00, 00, 33, C3, F5, 35, DF, 41, B1, 2B, 05, 4F, 51, 5C, 24, F8, F5, F9, C1, C8, 03, 85, E1, 0F, C8, 66, 3B, F5, F8, F5, 2D, D1, 7C, F2, 76, 85, F2, F5, 33, D8, 03, F8, 57, C3, FD, 6A, D4...
 
[+]

Code size:
923 KB (945,152 bytes)

Remove exe - Powered by Reason Core Security