home

tutor6.exe

Tutor

Brownstone Research Group Inc.

Publisher:
Brownstone  (signed by Brownstone Research Group Inc.)

Product:
Tutor

Version:
6.10.0094

MD5:
db5e5621ecb22fa665fb5e9a1fdf3a20

SHA-1:
f434aa3cfdcd37a550a4e479257e49fe07835e10

SHA-256:
15f1cda44aeceda155b1048b0026d6413ca528fa0b436674c346c827a0e0cd14

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:28:16 PM UTC  (today)

File size:
1.6 MB (1,676,312 bytes)

Product version:
6.10.0094

Original file name:
tutor6.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\tutor 6\tutor6.exe

Digital Signature
Signed by:
Brownstone Research Group Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
11/15/2005 10:45:31 AM

Valid to:
12/7/2007 2:12:14 PM

Subject:
CN=Brownstone Research Group Inc., OU=Secure Application Development, O=Brownstone Research Group Inc., L=Rome, S=Georgia, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
4038E8

File PE Metadata
Compilation timestamp:
7/6/2006 11:16:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:va6LPXJoJfsj+zODEi2OgboUmQlY//z9yEmJtlvRsmk7fHD66MmGWGy3HMeGVaIV:v5TrZ2FboURY//z9yEmJtR0/stgvyUm

Entry address:
0x97B0

Entry point:
68, AC, A1, 40, 00, E8, F0, FF, FF, FF, 00, 00, 40, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 75, 81, E9, 11, A4, 29, D5, 44, B8, 70, EF, CA, B7, CC, 7C, 2D, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 42, 00, 86, 50, 82, 01, 54, 75, 74, 6F, 72, 00, 39, 01, 00, 00, 00, 00, EC, 0A, 02, 02, B0, 00, 00, 00, 88, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 4D, 00, 00, 00, 15, 72, F6, 14, 34, 9F, 28, 4A, 87, EE, 8C, 0A, CA, B3, D4, 7C, 01, 00, 00, 00, 90, 00, 00, 00, A0, 00, 00, 00, 01, 00, 00, 00...
 
[+]

Entropy:
6.1856

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
1.4 MB (1,470,464 bytes)

The file tutor6.exe has been discovered within the following program.

Tutor  by Blackboard Inc.
Publisher's description - “Combining the capabilities of industry leaders Wimba and Elluminate, Blackboard Collaborate provides a comprehensive online learning and collaboration platform designed specifically for education.”
www.brownstone.net
7% remove it
 
Powered by Should I Remove It?

The file tutor6.exe has been seen being distributed by the following URL.

https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-x9TH5awkB2AQCeKQQLFJ-TI6PmDN8Dpv5KCWKwEfLm8uY56CY7jAiv779rQML0GYGl2LEeEb8L4Fd0GBJs5fOA/messages/@.id==AGJUimIAAGXeVztf0QBhqAcaR6A/content/parts/@.id==2/raw?appid=YahooMailNeo&token=zitEzqOML3j84e6ealFTT5U7-km5qEQF52lp7AcCuBYeyn2EBcq44sIP6mbGQzR0dJPBRYiN3aEQRczfNrfJcg&error=https://us-mg5.mail.yahoo.com/.../iframemsg?id=c8631105-0b83-36f2-bace-7d66a0fe320c&ymreqid=c3579068-5c3e-2241-01eb-d3001a010000

Scan tutor6.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.