itr2_yoursearching.exe
5941_itr2_yoursearching
Peng Zhang
The application itr2_yoursearching.exe by Peng Zhang has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
File name:
itr2_yoursearching.exe
Publisher:
RSys(P) (signed by Peng Zhang)
Product:
5941_itr2_yoursearching
MD5:
7788b8ca7b63571a7ce7492a6261b4ef
SHA-1:
06c221b173e9691d002ea474c01985a9f65a3b93
SHA-256:
21ae00b77d40d7f0a8051182f06fd046ec072c6c21389ba2d55146b21b326ab8
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
12/26/2024 3:34:54 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.PengZhan (M)
16.3.31.17
File size:
688.7 KB (705,248 bytes)
Copyright:
Copyright (C) Page-V Link Since 2002
Original file name:
Page-Sys.exe
File type:
Executable application (Win32 EXE)
Language:
English (United States)
Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\itr2_yoursearching.exe
Valid from:
3/14/2016 7:00:00 PM
Valid to:
11/2/2016 6:59:59 PM
Subject:
CN=Peng Zhang, OU=Individual Developer, O=No Organization Affiliation, L=Beijing, S=Beijing, C=CN
Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US
Serial number:
66A333E5E7CA3366107188FABDD141F1
Compilation timestamp:
3/10/2016 1:15:54 AM
CTPH (ssdeep):
12288:TcsI9l1yq5pCTwX5OFKaBuHyE1ZBGTrgFriHyfO3naGe:8b1yq5wTjlJsFrgyfO3naGe
Code size:
667.5 KB (683,520 bytes)