» soda_pdf_3d_reader_installer.exe
Overview
Analysis
File Details
Behaviors (1)
Downloads (1)

soda_pdf_3d_reader_installer.exe

Soda PDF 3D Reader Installer

LULU SOFTWARE LIMITED

This is a setup and installation application. This is the uninstaller utility registered in the Windows Control Panel for the program Soda PDF 3D Reader by LULU Software Limited. The file has been seen being downloaded from win.cutephp.com.

File name:

Publisher:

LULU SOFTWARE LIMITED (signed and verified)

Product:

Soda PDF 3D Reader Installer

Version:

6.0.22.17373

MD5:

2d76e0f3add6e359c503f37c5fdf8d5b

SHA-1:

dd0ea93db23284625921ee49cff12bd7e213e152

SHA-256:

ef557409ca12d0b6c80469281d0079b8161622cafbe5e4564734bb04fcbc1aba

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/18/2024 2:55:24 PM UTC (today)

Scan engine

Detection

Engine version

ESET NOD32

Win32/InstallIQ (variant)

8.10233

File size:

6.2 MB (6,452,872 bytes)

Product version:

6.0.22.17373

Original file name:

PDF Installer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\soda pdf 3d reader\installation\soda_pdf_3d_reader_installer.exe

Digital Signature

Signed by:

LULU SOFTWARE LIMITED

Authority:

VeriSign, Inc.

Valid from:

12/11/2012 1:00:00 AM

Valid to:

12/12/2014 12:59:59 AM

Subject:

CN=LULU SOFTWARE LIMITED, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=LULU SOFTWARE LIMITED, L=Ta'Xbiex, S=XBX, C=MT

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

24FE117F25418BBA37C999FEF144C83A

File PE Metadata

Compilation timestamp:

6/17/2014 5:30:44 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

196608:vqnyr7sRD9vO6lyRFaucj2avQh2V5cniwZd:XSg6lyfcqmQq/wZd

Entry address:

0xB61070

Entry point:

60, BE, 00, 50, 94, 00, 8D, BE, 00, C0, AB, FF, C7, 87, 3C, 52, 56, 00, E8, 96, 39, EA, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:

6.1 MB (6,410,240 bytes)

Program Uninstaller

Program name:

Soda PDF 3D Reader

Display publisher:

LULU Software Limited

Display version:

6.0.22.17373

Uninstall string:

C:\ProgramData\Soda PDF 3D Reader\Installation\Soda_PDF_3D_Reader_Installer.exe /uninstall

The file soda_pdf_3d_reader_installer.exe has been seen being distributed by the following URL.

http://win.cutephp.com/go?p=2242668

Scan soda_pdf_3d_reader_installer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.