instantmask.exe

Victor Zaguskin

Publisher:
Victor Zaguskin  (signed and verified)

MD5:
9759b3594178c6a1f8edc74118b916ce

SHA-1:
c278d2a7b3d9bb1d32fee87e2fc51e7aaa7cecc8

SHA-256:
81bf1ce097b1fc2710ec58afe59c9cc666a07651a47527e86993cd6a71a764fd

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/27/2024 9:35:42 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Trojan.Agent-124036
0.98/18155

Comodo Security
Virus.Win32.Virut.CE
11389

File size:
3.7 MB (3,846,272 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\instantmask pro 2.8\instantmask.exe

Digital Signature
Signed by:

Authority:
StartCom Ltd.

Valid from:
12/26/2011 6:32:25 AM

Valid to:
12/26/2013 9:00:42 AM

Subject:
E=business@clipping-path-studio.com, CN=Victor Zaguskin, L=Nizhny Novgorod, S=Nizhny Novgorod Oblast, C=RU, Description=600737-3BdAjV4r3jQ6MtHt

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
04E0

File PE Metadata
Compilation timestamp:
9/9/2011 3:01:43 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:DRsmju4ZHw6fyqyxHea/OuUbH4QTqTOuwoQsp7So8iOVdaygvYxxq9W634xjT/:DRsm7ZHw6fybhyfuwoQW8iqQkkqjj

Entry address:
0x70DCF3

Entry point:
E9, 40, BF, FE, FF, A4, 91, 61, A9, D1, 8B, 60, B3, 25, 74, 9B, 8E, 2A, 86, 6A, 5A, 42, E6, 5A, C6, 4E, AE, 5A, 4A, 9A, EE, FC, D7, 03, EB, E4, 39, 39, 0C, 1A, AF, 25, 3D, 8D, 88, 85, 97, BC, 6C, 3C, EF, 04, E0, D5, F5, 5B, DA, E6, D7, 4A, 75, 9E, 76, 88, E9, 6C, D4, 1E, 5E, 94, 09, A9, 82, BA, B1, A8, 62, A9, 9F, E8, 4F, CA, 40, BE, 3E, BC, FD, 60, 82, 96, E5, AA, 95, AA, B1, A9, E9, C8, B9, B0, 8B, 36, 24, 0F, 30, 2B, D9, C6, A7, C2, A3, 8F, 02, 16, 1D, 0E, BF, BF, 5A, 33, F9, 42, 90, 80, EC, 1A, 25, 0E...
 
[+]

Entropy:
7.8945

Packer / compiler:
Xtreme-Protector v1.05

Code size:
442 KB (452,608 bytes)

The file instantmask.exe has been discovered within the following program.

InstantMask Pro 2.8  by clipping-path-studio.com
clipping-path-studio.com
About 2% of users remove it
 
Powered by Should I Remove It?

Scan instantmask.exe - Powered by Reason Core Security