home

pta31.exe

This is a setup program which is used to install the application.
MD5:
fd319ea67a395a9ff90b902b164205bf

SHA-1:
04c595b9e19288aa5b40c3ed348562e4e6758974

SHA-256:
22ba8aa740ae1edebdadbb7f32c413bef2a768d0a1082c810803e48c859877dd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 5:28:55 PM UTC  (today)

File size:
1008.1 KB (1,032,247 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\pta31.exe

File PE Metadata
OS version:
124.4353

OS bitness:
Win16

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
24576:igCDOytOaAxFv3izuL93sFXmyYkSnEh3W6Nd3F0AYaXxRSpOjMERqlq7M2F+7Kaw:vzbxFvyKL93soybSEdWMd3WmzpjpRqlW

Entry address:
0x10C0106

Entry point:
4D, 5A, 90, 00, 02, 00, 00, 00, 22, 00, 11, 00, FF, FF, 07, 00, 00, 01, 65, 40, 00, 00, 00, 00, 40, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 90, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9977  (probably packed)

Code size:
192 KB (196,611 bytes)

The file pta31.exe has been seen being distributed by the following URL.

ftp://ftp.kodak.com/web/dai/.../pta31.exe

Scan pta31.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.