home

windchillqualitysolutions10.0continueinstall.exe

RebootContinue

Parametric Technology Corporation

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WindchillQualitySolutionsContinueInstall’.
Publisher:
Parametric Technology Corporation  (signed and verified)

Product:
RebootContinue

Version:
10.0.0.0

MD5:
417a06849ae4dc471b8c7b6cdcdafe87

SHA-1:
21a600bdbd71d7d3b62279d730a7bfa3b4312905

SHA-256:
e8598266b8a4684085a395c5a6e44b393587ce3159e0c461c14b3b1c3adfacc4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 12:27:21 AM UTC  (today)

File size:
199.1 KB (203,840 bytes)

Product version:
10.0.0.0

Copyright:
© 1986 - 2011 PTC

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\ProgramData\ptc\windchill quality solutions\10.0 tryout\windchillqualitysolutions10.0continueinstall.exe

Digital Signature
Signed by:
Parametric Technology Corporation

Authority:
VeriSign, Inc.

Valid from:
8/31/2009 1:00:00 AM

Valid to:
10/4/2012 12:59:59 AM

Subject:
CN=Parametric Technology Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Parametric Technology Corporation, L=Arden Hills, S=Minnesota, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
05BDED826383AB0C993AD86DC9157D49

File PE Metadata
Compilation timestamp:
4/10/2010 1:19:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
6.0214

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WindchillQualitySolutionsContinueInstall

Command:
"C:\ProgramData\ptc\windchill quality solutions\10.0 tryout\windchillqualitysolutions10.0continueinstall.exe" \keC:"software\ptc\windchill quality solutions 10.0 tryout\install"


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.