home

PVS-Studio_Cmd.exe

PVS-Studio Command Line Analyzer

OOO

The application PVS-Studio_Cmd.exe by OOO has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
OOO "Program Verification Systems"  (signed by OOO )

Product:
PVS-Studio Command Line Analyzer

Version:
6.13.21152.101

MD5:
ea8392a51844198881cfd13cbf41bfa2

SHA-1:
00bf71c979402a544a2c120578a8434f9468268a

SHA-256:
3c24aa1ddfebdc17c94241a3f44039d3882209371032e55efb14b467ba05c1ec

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/27/2024 3:53:47 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.2.19

File size:
3.1 MB (3,210,888 bytes)

Product version:
6.13.21152.101

Copyright:
Copyright (c) 2008-2016 OOO "Program Verification Systems"

Trademarks:
(c) 2008-2016 OOO 'Program Verification Systems'

Original file name:
PVS-Studio_Cmd.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\pvs-studio\pvs-studio_cmd.exe

Digital Signature
Signed by:
OOO

Authority:
COMODO CA Limited

Valid from:
2/12/2016 9:00:00 AM

Valid to:
2/11/2019 8:59:59 AM

Subject:
CN="OOO ""Program Verification Systems""", O="OOO ""Program Verification Systems""", STREET="70 Korp. 1 kv. 88, ul.Metallurgov", L=Tula, S=Russia, PostalCode=300027, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E706CCD87DA6065486B42C0646C2DBF9

File PE Metadata
Compilation timestamp:
2/17/2017 5:25:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
48.0

.NET CLR dependent:
Yes

Entry address:
0x27606A

Entry point:
FF, 25, 00, 20, 40, 00, 73, 22, 6A, 22, 69, 22, 5B, 22, B9, 21, 65, 22, 5D, 22, 97, 22, A8, 21, F1, 21, 03, 22, BB, 21, 04, 22, 00, 00, 00, 00, 00, 00, 59, 22, A9, 22, BC, 22, 5D, 22, 64, 21, 67, 21, 66, 21, 65, 21, 10, 00, 00, 00, 00, 01, 00, 00, 20, 00, 00, 00, 00, 02, 00, 00, 6A, 22, 6C, 22, 6B, 22, 73, 22, 72, 22, 75, 22, 79, 22, 6D, 22, 69, 22, 77, 22, 58, 22, C2, 21, C3, 21, C1, 21, 00, 00, 00, 00, EA, 21, EC, 21, EB, 21, ED, 21, E8, 21, E9, 21, 00, 00, 00, 00, 59, 22, BD, 21, BA, 21, BC, 22, A9, 22...
 
[+]

Entropy:
5.3567

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.5 MB (2,573,312 bytes)

Remove PVS-Studio_Cmd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.