home

percpicts.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from step.psy.cmu.edu.
MD5:
749691f0ae619d041cceb9b50ade64d4

SHA-1:
69411cdca8445abc766b66085cdc5ccf0e08b108

SHA-256:
08d3970d78c32f11eab2a198017324cf7492b747408766731344772f6c09547b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/20/2024 11:12:00 AM UTC  (today)

File size:
127.1 KB (130,174 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\percpicts.exe

File PE Metadata
Compilation timestamp:
10/26/1997 8:18:28 PM

OS version:
374.1786

OS bitness:
Win16

Linker version:
8.0

CTPH (ssdeep):
3072:fs8znSDCzFFIm4ewc8YDwe92bRxvNnSnodk3G7Yr2fLz9t:fs8znSGzFFboYDxALv5SOkOt

Entry address:
0x1C701BB

Entry point:
4D, 5A, EA, 00, 03, 00, 00, 00, 24, 00, 00, 00, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 01, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 40, 04, 00, 00, 00, 02, 50, 6B, 6C, 69, 74, 65, 28, 52, 29, 20, 43, 6F, 70, 72, 2E, 20, 31, 39, 39, 30, 2D, 31, 39, 39, 36, 20, 50, 4B, 57, 41, 52, 45, 20, 49, 6E, 63, 2E, 20, 41, 6C, 6C, 20, 52, 69, 67, 68, 74, 73, 20, 52, 65, 73, 65, 72, 76, 65, 64, 00, 1D, 01, 5E, 08...
 
[+]

Entropy:
7.8582  (probably packed)

Code size:
384 KB (393,224 bytes)

The file percpicts.exe has been seen being distributed by the following URL.

http://step.psy.cmu.edu/schunn/.../Percpicts.EXE

Scan percpicts.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.