home

PCConfidential.exe

PC Confidential

Capital Intellect Inc

The application PCConfidential.exe by Capital Intellect Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program PC Confidential 2013 by Winferno.com.
Publisher:
Capital Intellect, Inc  (signed by Capital Intellect Inc)

Product:
PC Confidential

Version:
2013.01.0047

MD5:
5d69e82674c195df12f4cdd791947808

SHA-1:
2d413721abff3acc7e8a7d6b10fe9e1da325419b

SHA-256:
4480fb732ec7084033ccdc8145af2fae54652c3be881ded642330bae9aa948ee

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/24/2024 6:29:35 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.4.17.1

File size:
57.3 MB (60,037,096 bytes)

Product version:
2013.01.0047

Copyright:
Copyright (c) 2000-2012 Capital Intellect Inc

Trademarks:
All Rights Reserved. Capital Intellect Inc

Original file name:
PCConfidential.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\winferno\pc confidential\pcconfidential.exe

Digital Signature
Signed by:
Capital Intellect Inc

Authority:
VeriSign, Inc.

Valid from:
7/19/2011 8:00:00 PM

Valid to:
7/20/2014 7:59:59 PM

Subject:
CN=Capital Intellect Inc, OU=Winferno Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Capital Intellect Inc, L=Boston, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
197FCA08FE62EEB9A434DA3987E23171

File PE Metadata
Compilation timestamp:
6/21/2012 10:07:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:ibTP+UOoRrw/XRQljQE+I80ZAhkN2D7Ez:sRrwxVhkkDwz

Entry address:
0x183B0

Entry point:
68, CC, 90, 41, 00, E8, F0, FF, FF, FF, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 47, B6, A7, 15, 0A, 29, 6B, 41, A8, 0D, A7, 5B, 33, 5E, E5, 3C, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 48, 00, 06, 50, 83, 02, 50, 43, 43, 6F, 6E, 66, 69, 64, 65, 6E, 74, 69, 61, 6C, 00, 01, 00, 00, 00, 00, D0, 77, 5A, 01, C0, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 41, 00, 00, 00, 36, F6, 61, E4, 64, 6B, 00, 4E, A6, E5, 59, C6, 79, D1, 63, DE, 01, 00, 00, 00, A0, 00, 00, 00...
 
[+]

Entropy:
5.1763

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
1.5 MB (1,540,096 bytes)

Internet Explorer Extension
Name:
{53F6FCCD-9E22-4d71-86EA-6E43136192AB}


The file PCConfidential.exe has been discovered within the following program.

PC Confidential 2013  by Winferno.com
Publisher's description - “PC Confidential deep scans your PC to locate all traces of private data including website history, cache, cookies and more. Next PC Confidential compiles this data so that with one click you can thoroughly erase it all or select pieces to erase.”
www.Winferno.com
51% remove it
 
Powered by Should I Remove It?

Remove PCConfidential.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.