» primus-dcfwebsetup.fr.exe
Overview
Analysis
File Details

primus-dcfwebsetup.fr.exe

PriMus-DCF Web Setup

ACCA software S.p.A.

This is a setup and installation application.

File name:

Publisher:

ACCA software S.p.A. (signed and verified)

Product:

PriMus-DCF Web Setup

Version:

40.0.2.0

MD5:

0a587bb6e6c02877b85efaf81fb85388

SHA-1:

144115a6f02531f99e58119d0849f538d5bf37fb

SHA-256:

5f4c0e50d7009f19dd6a475ab350e7e2b5e17334d43df1d9ea3da3f7eb0bf22d

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

11/15/2024 10:31:04 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/18011

Quick Heal

(Suspicious) - DNAScan

2.16.11.00

File size:

591.4 KB (605,632 bytes)

Product version:

Revolution(b)

Trademarks:

ACCA è un marchio registrato - ACCA software S.p.A. - Italy

Original file name:

PriMus-DCFWebSetup.exe

File type:

Executable application (Win32 EXE)

Language:

Italian (Italy)

Common path:

C:\users\{user}\downloads\primus-dcfwebsetup.fr.exe

Digital Signature

Signed by:

ACCA software S.p.A.

Authority:

VeriSign, Inc.

Valid from:

1/4/2010 1:00:00 AM

Valid to:

1/10/2011 12:59:59 AM

Subject:

CN=ACCA software S.p.A., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ACCA software S.p.A., L=Montella, S=AVELLINO, C=IT

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

21D341473B56E3E945FF03492C1C2248

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:u+2RS2CkzGo9NV9IW89R9ar/zHU/mUes1SonnyPFYAEKW1K3DnsTW1Q4E:CRjC8zVl8/4/zBNs1Sonyt/W4DsGE

Entry address:

0x1000

Entry point:

68, 01, 30, 52, 00, E8, 01, 00, 00, 00, C3, C3, 7C, BD, 01, A8, F7, E8, 7A, C8, 78, 2E, C3, 9E, 9D, B0, 6D, 5B, 63, 72, F9, 9A, 15, F8, EE, A7, D8, 33, 06, A0, 7C, 3F, 3D, 5F, 38, 09, 64, D6, CF, 5E, 23, A0, 86, 02, FB, 45, BE, A0, 06, BA, D1, 28, 3E, B6, 3E, 1C, CF, D5, F1, 80, 9A, D9, 01, 2B, 97, DC, 4F, FA, 8D, A2, 89, 07, D3, 4F, 49, 6F, 06, D0, 2C, 8F, D7, C9, D5, 59, 7D, EA, 15, B3, 6A, 7F, 11, 57, C2, 15, AC, D2, 0E, 53, B8, 13, 55, 77, 5A, 6C, 5B, 78, 2B, DE, 50, 78, B9, F0, C3, 78, DF, 21, 56, 81... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

979.5 KB (1,003,008 bytes)

Scan primus-dcfwebsetup.fr.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.