home

pivot 3 pl.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from onedrive.live.com and multiple other hosts.
MD5:
63a06f2fdd2ec766a65222f8b535ece1

SHA-1:
e8e874bac3139033d018721b9547eb6bf870092f

SHA-256:
2b9de430f7095f2b469b9674bd95b85493e9986da6b5083b35e9702da7421ae0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 10:48:01 AM UTC  (today)

File size:
817 KB (836,608 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\pivot 3 pl by mouse\pivot 3 pl.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:KO/pFWVApt60Lco44MvVeHyJpcHYTEzp:K+3LcJYcw

Entry address:
0xA397C

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, DC, 36, 4A, 00, E8, D7, 25, F6, FF, 8B, 1D, 60, 63, 4A, 00, 8B, 03, E8, 36, FD, FB, FF, 8B, 0D, 64, 61, 4A, 00, 8B, 03, 8B, 15, 1C, 98, 49, 00, E8, 3B, FD, FB, FF, 8B, 0D, 74, 61, 4A, 00, 8B, 03, 8B, 15, 5C, 5C, 49, 00, E8, 28, FD, FB, FF, 8B, 0D, 84, 62, 4A, 00, 8B, 03, 8B, 15, F0, 5E, 49, 00, E8, 15, FD, FB, FF, 8B, 0D, A8, 64, 4A, 00, 8B, 03, 8B, 15, C0, 2D, 4A, 00, E8, 02, FD, FB, FF, 8B, 0D, F0, 62, 4A, 00, 8B, 03, 8B, 15, D4, 92, 49, 00, E8, EF, FC, FB, FF, 8B, 0D, 90...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
651 KB (666,624 bytes)

The file pivot 3 pl.exe has been seen being distributed by the following 3 URLs.

https://onedrive.live.com/download.aspx?cid=9621FB96415E39E5&authKey=!AJNetJo2ZoH_G94&resid=9621FB96415E39E5!1256&ithint=.exe

http://zso-godzianow.pl/aktualnosci/.../pivot3PL.exe

https://onedrive.live.com/download.aspx?cid=9621FB96415E39E5&authKey=!AJNetJo2ZoH_G94&resid=9621FB96415E39E5!1256

Scan pivot 3 pl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.