home

pcw0005ped.exe

MD5:
cd450c564bc7eaeb2d970669e7956eb7

SHA-1:
46b11ad2b5ca933234047e4beda78b5fcef89ce0

SHA-256:
ce36e19edd43294b98ec802a998f1938bd95ee721bbd406294e521e1c5aa4634

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2025 7:29:49 AM UTC  (today)

File size:
42.5 KB (43,496 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\pcw0005ped.exe

File PE Metadata
OS version:
8778.13681

OS bitness:
Win16

Linker version:
3.0

CTPH (ssdeep):
768:KC/rPXIXRZfIVbyYHbWeCuPEOpktYie/4oC+mpuh3vMQ:b/LIfgZHbVCKEPtdX+pN

Entry address:
0x6C0064

Entry point:
4D, 5A, B7, 01, 22, 00, 14, 00, 09, 00, 72, 01, FF, FF, AB, 04, A0, 0F, 00, 00, 10, 21, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C0, 43, 00, 00, B4, 05, 00, 00, C1, 05, 00, 00, 2B, 0A, 00, 00, 9E, 0A, 00, 00, CE, 0A, 00, 00, 5A, 0D, 00, 00, DA, 0D, 00, 00, 9B, 0E, 00, 00, AF, 0E, 00, 00, D1, 0E, 00, 00, 06, 0F, 00, 00, E0, 0F, 00, 00, FF, 14, 00, 00, AA, 16, 00, 00, 0A, 22, 00, 00, EC, 21, 00, 00...
 
[+]

Entropy:
7.2540

Code size:
256 KB (262,147 bytes)

The file pcw0005ped.exe has been seen being distributed by the following URL.

http://www.pcwelt.de/download_file?bid=598571

Scan pcw0005ped.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.