rcasciitounicodex64.exe

Max Secure Software

The application rcasciitounicodex64.exe by Max Secure Software has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Max Secure Software  (signed and verified)

MD5:
deab8df3604187a2caf597f542db0958

SHA-1:
a8264fdf882f8fdc4fda0edd79f77e91ee7b0f1e

SHA-256:
c49a80d6a3c5bbd1ee4b752607233f7cb073717b21fe6be4ff070216a86950bb

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
7/7/2025 12:30:51 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.MaxSecure.Optional (L)
16.7.31.9

File size:
375 KB (383,952 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\max registry cleaner\rcasciitounicodex64.exe

Digital Signature
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/24/2008 10:38:31 PM

Valid to:
1/8/2009 10:34:12 PM

Subject:
CN=Max Secure Software, OU=Max Secure Software, O=Max Secure Software, L=Pune, S=MH, C=IN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
47B878B835A406D31B4C2E17C1097FD7

File PE Metadata
Compilation timestamp:
10/18/2007 10:24:16 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
6144:hQjaUBin5MvoQR3AAgYH2OnGZO1vUJQZkJ5SGmJ:h2hi5tfHYJG9JQZk+lJ

Entry address:
0x19BD0

Entry point:
48, 83, EC, 28, E8, 07, B3, 00, 00, 48, 83, C4, 28, E9, 3E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 58, 48, 89, 6C, 24, 68, 48, 89, 7C, 24, 78, 49, 63, 78, 0C, 4C, 89, 64, 24, 50, 4C, 89, 6C, 24, 48, 4C, 89, 74, 24, 40, 4C, 89, 7C, 24, 38, 4C, 8B, F9, 49, 8B, C8, 4D, 8B, E1, 4D, 8B, F0, 4C, 8B, EA, E8, 26, B4, 00, 00, 85, FF, 4D, 8B, 17, 4D, 89, 14, 24, 8B, E8, 0F, 84, CE, 00, 00, 00, 48, 89, 74, 24, 70, 48, 8D, 0C, BF, 48, 89, 5C, 24, 60, 48, 8D, 34, 8D, EC, FF, FF...
 
[+]

Entropy:
6.0460

Code size:
244 KB (249,856 bytes)

Remove rcasciitounicodex64.exe - Powered by Reason Core Security