home

pspad458inst_cz.exe

PSPad editor

Jan Fiala

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.slunecnice.cz and multiple other hosts.
Publisher:
Jan Fiala

Product:
PSPad editor

Description:
PSPad editor Setup

Version:
4.5.8.2500

MD5:
93b744b1f85bad92c9950fe0a97755f2

SHA-1:
b5d96bf81f828e76c0da76a4c6b1467201a6f67b

SHA-256:
19473abfdf0d08592b81263b3043ae63b5656192e773a590eec6799d446e8d71

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:43:41 AM UTC  (today)

File size:
3.9 MB (4,078,315 bytes)

Product version:
4.5.8.2500

Copyright:
Copyright © 2001 Jan Fiala

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\pspad458inst_cz.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:M5kkmQi8eDad/biYp24Ow60mNS5XLevYpd7BjlJC8:JDad/+YGnZRvYx

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file pspad458inst_cz.exe has been seen being distributed by the following 7 URLs.

http://www.slunecnice.cz/sw/pspad/stahnout/.../?m=043fe2f6008b25dbed0d27c6e08c38a4&t=54be961a

http://ftp-stahuj.centrum.cz/dl/b5dc25899485e03fac49c7bf496e41de/54dd056f/stahuj/download/software/secured/p/pspad/458/.../pspad458inst_cz.exe

http://ftp-stahuj.centrum.cz/512A3A20-903E-411E-9BD0-DE24D9DD10F2/FinalDownload/DownloadId-F3B9A69F4CBEECC4BF8145C293BE8159/512A3A20-903E-411E-9BD0-DE24D9DD10F2/dl/5827cdc4483fce0ef8ab9ce806b17faf/551e9929/stahuj/download/software/secured/p/pspad/458/.../pspad458inst_cz.exe

http://download.slunecnice.cz/slunecnice/ac3f19c39b9e046037ae593f73820d14/54c913ae/win/.../pspad458inst_cz.exe

http://www.slunecnice.cz/sw/pspad/stahnout/.../?m=ac3f19c39b9e046037ae593f73820d14&t=54c913ae

http://ftp-stahuj.centrum.cz/dl/8fd818396fe24c1b281a0088d78414c1/55219fb8/stahuj/download/software/secured/p/pspad/458/.../pspad458inst_cz.exe

http://pspad.poradna.net/.../pspad458inst_cz.exe

Scan pspad458inst_cz.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.