» microsoft visio pro 2013 product key.exe
Overview
Analysis
File Details

microsoft visio pro 2013 product key.exe

.b4ProductName

ZDRAVPORTAL

The application microsoft visio pro 2013 product key.exe by ZDRAVPORTAL has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

Publisher:

ZDRAVPORTAL (signed and verified)

Product:

.b4ProductName

Version:

172.3.4.630

MD5:

18ee295dfe5bbad34db6591460c6856e

SHA-1:

7276024c19b114bc31156d49437999c3b35951b9

SHA-256:

388823ed56205365075b65ccf27aa9c9568cf062ed510da897eb73db7967f020

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/9/2025 9:36:40 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallMonster (M)

17.3.15.9

File size:

5.8 MB (6,103,096 bytes)

Product version:

3250.30.0.0

.x1LegalCopyright

Trademarks:

.c2LegalTrademarks

Original file name:

.v3OriginalFilename

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\microsoft visio pro 2013 product key.exe

Digital Signature

Signed by:

ZDRAVPORTAL

Authority:

COMODO CA Limited

Valid from:

6/29/2016 5:30:00 AM

Valid to:

6/30/2017 5:29:59 AM

Subject:

CN=ZDRAVPORTAL, O=ZDRAVPORTAL, STREET="40 let pobedy, 13B, 61", L=Toljatti, S=RU, PostalCode=445030, C=RU

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00FFEAC39294E34619291EC332D59CD799

File PE Metadata

Compilation timestamp:

7/7/2016 1:49:32 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

Entry address:

0x21BB9C

Entry point:

55, 8B, EC, 83, C4, E4, 53, 56, 57, 33, C0, 89, 45, EC, 89, 45, E8, 89, 45, E4, B8, 44, 07, 61, 00, E8, BA, 34, DF, FF, 33, C0, 55, 68, 79, BF, 61, 00, 64, FF, 30, 64, 89, 20, 8D, 55, EC, B8, 16, 00, 00, 00, E8, AF, 22, FC, FF, 8B, 45, EC, E8, BF, EA, DE, FF, 50, 8D, 55, E4, B8, 1E, 00, 00, 00, E8, B9, 18, FC, FF, 8B, 45, E4, E8, A9, EA, DE, FF, 8B, D0, 8D, 45, E8, E8, 7B, E7, DE, FF, 8B, 45, E8, E8, 23, 2C, FC, FF, 5A, E8, C9, 2C, FC, FF, A3, 78, CB, 7F, 00, 33, D2, 55, 68, 42, BC, 61, 00, 64, FF, 32, 64... 
[+]

Entropy:

7.6199

Developed / compiled with:

Microsoft Visual C++

Code size:

2.1 MB (2,207,232 bytes)

Remove microsoft visio pro 2013 product key.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.