Information about pstubxx(488).exe

pstubxx(488).exe

File Details

MD5: 290aed621ff7c324322c4fb7138bdef1
Size: 48 KB
First Published: 2017-05-21 09:01:35 (6 years ago)
Latest Published: 2022-09-01 23:05:23 (2 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2022-09-01 23:05:23 (2 years ago)

Overview

Signed By: Slimware Utilities Holdings, Inc.
Status: Valid

Common Places:

%temp%\7zs4317.tmp
%temp%\7zs9243.tmp
%sysdrive%\windows.old\users\jelly bean\appdata\local\temp\7zsf7f3.tmp
%temp%\7zsa247.tmp
%temp%\7zs8527.tmp
%temp%\7zsf2ee.tmp
%temp%\7zs3f0b.tmp
%temp%\7zsc9b4.tmp
%temp%\7zs9dfd.tmp
%temp%\7zs6d40.tmp

File Names:

pstubxx.exe
pstubxx(488).exe
pstubxx (2015_12_03 10_16_27 UTC).exe
pstubxx (2015_11_29 14_14_14 UTC).exe
pstubxx.exe.quarantined
{C4085260-0929-469E-8897-BE45761A2A72}
A0005896.exe

Geography:

27.8%
10.0%
8.6%
8.3%
6.5%
4.0%
3.9%
3.0%
2.5%
1.9%
1.6%
1.6%
1.4%
1.4%
1.2%
0.9%
0.9%
0.7%
0.7%
0.7%
0.7%
0.7%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 10 48.6%
Windows 7 43.1%
Windows 8.1 6.9%
Windows 8 1.0%
Windows Vista 0.2%
Windows XP 0.2%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001902

PE Sections:

Name Size of data MD5
.text 24576 b5499a8d2a93b9923db2f696490948fc
.rdata 9728 04c4caa8045967e2800a0a5b1f024f75
.data 3584 434a166a84af9598145062909e0de339
.rsrc 512 44a70bdd3dc9af38103d562d29023882
.reloc 3584 949af493c581205530b83d1a71dd6a1f

More information:

Search on Virustotal
copyright for information about pstubxx(488).exe