Hypercorrectness.exe
Spitz2
Rabah Azrarak
The file Hypercorrectness.exe by Rabah Azrarak has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from phituseochains.com.
File name:
Hypercorrectness.exe
Publisher:
Zsoft64 (signed by Rabah Azrarak)
MD5:
4384c792ed4e17adf7f879ab3b062d49
SHA-1:
403ea03492fce40a9a7428b54ee21bdacb6c8726
SHA-256:
6ccdfe47616280f05bcefe5c8ed183864da2323b6aecdd8d3f35a7c0de5e842f
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
12/26/2024 12:30:33 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.RabahAzr (M)
16.5.23.0
File size:
271.9 KB (278,472 bytes)
Original file name:
Hypercorrectness.exe
Language:
Danish (Denmark)
Common path:
C:\users\{user}\downloads\e42e.tmp
Authority:
Unizeto Technologies S.A.
Valid from:
5/12/2016 1:39:13 AM
Valid to:
5/12/2017 1:39:13 AM
Subject:
E=rabahsoft@yahoo.com, CN=Rabah Azrarak, O=Rabah Azrarak, C=CH
Issuer:
CN=Certum Code Signing CA SHA2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
Serial number:
0ECD460CE14BD8EF2926DA2CD9A44176
The file Hypercorrectness.exe has been seen being distributed by the following URL.