home

vectric cut3d full__10924_i1695824603_il574469.exe

PC Zahidprominstrument

The application vectric cut3d full__10924_i1695824603_il574469.exe by PC Zahidprominstrument has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
PC Zahidprominstrument  (signed and verified)

MD5:
810fbcb8e9263bf512a65d227cff56d5

SHA-1:
1a0763856fe7af7d1582c36c8ec927a1e0324e30

SHA-256:
bdb9ba57eb25bee7cae1224f07ab6fbee931cf3aba8045e3485f25db416a27ba

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/24/2024 3:56:25 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.PCZahidprominstrument (M)
15.10.6.14

File size:
1.2 MB (1,268,928 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\vectric cut3d full__10924_i1695824603_il574469.exe

Digital Signature
Signed by:
PC Zahidprominstrument

Authority:
COMODO CA Limited

Valid from:
8/26/2015 1:00:00 AM

Valid to:
8/26/2016 12:59:59 AM

Subject:
CN=PC Zahidprominstrument, O=PC Zahidprominstrument, STREET=Akademika Voznjaka 10, L=Lvov, S=Lvov, PostalCode=79020, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00ECC15FACBBA3343A6FC9097C30BDAF29

File PE Metadata
Compilation timestamp:
10/6/2015 11:21:56 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:f+6v7zO6+RZEuKsj03+BglsFNfo2BnSYtb0CnXwlVk+VMSiIG:f+6vGNg3V31ooMSYt9AldQ

Entry address:
0x9A10

Entry point:
E8, 65, 3C, 00, 00, E9, 24, FE, FF, FF, FF, 35, 78, 40, 43, 00, E9, DE, EB, 00, 00, C3, FF, 35, 78, 40, 43, 00, E9, CB, 62, 00, 00, 85, C0, 74, 02, FF, D0, 6A, 19, E8, F2, 1F, 00, 00, 6A, 01, 6A, 00, E8, 48, 43, 00, 00, 83, C4, 0C, E9, 5F, 43, 00, 00, 55, 8B, EC, 56, FF, 35, 78, 40, 43, 00, E9, 52, F0, FF, FF, FF, 75, 08, 8B, F0, E9, BA, AC, 01, 00, A3, 78, 40, 43, 00, 8B, C6, 5E, 5D, C3, CC, CC, CC, CC, CC, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76...
 
[+]

Entropy:
7.4847

Code size:
149 KB (152,576 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.