home

CheckOffice2010_Compatibility.exe

No64Bit

Sapro Systems

Publisher:
J.P. Morgan Chase & Co.  (signed by Sapro Systems)

Product:
No64Bit

Version:
1.00

MD5:
1cee7124a0b4ed833114256ef0853fdc

SHA-1:
3200545f0a55e665ce5eecb84db72453f12a6f78

SHA-256:
fc6b5c0bba286bbacc09d3d94046fceca41c58ac9f6eb002c048aa9bde72dd1d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 4:19:22 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
BScope.Trojan-Dropper.Injector
3.12.26.3

File size:
50.5 KB (51,704 bytes)

Product version:
1.00

Original file name:
CheckOffice2010_Compatibility.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\checkoffice2010_compatibility.exe

Digital Signature
Signed by:
Sapro Systems

Authority:
GoDaddy.com, Inc.

Valid from:
2/15/2012 12:01:19 AM

Valid to:
2/15/2015 12:01:19 AM

Subject:
CN=Sapro Systems, O=Sapro Systems, L=New York, S=NY, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
03F71B6F864442

File PE Metadata
Compilation timestamp:
4/25/2012 12:44:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:0u24Te+Ls2svbdN1foX+VRTipTqBPMXZ7:0udTe+Ls2svbdN1fa+LipeMXZ7

Entry address:
0x13E8

Entry point:
68, F8, 14, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 50, 00, 00, 00, 00, 00, 00, 00, DB, A8, 3E, DF, BB, 66, F1, 4C, 90, DA, 2E, 70, 24, 02, 1F, 62, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 20, 4C, 6F, 67, 4D, 73, 50, 72, 6F, 6A, 65, 63, 74, 43, 68, 65, 63, 6B, 36, 34, 42, 69, 74, 5F, 41, 6E, 64, 5F, 57, 69, 6E, 43, 61, 6C, 56, 32, 00, 20, 00, 00, 00, 00, 07, 00, 00, 00, 34, 22, 40, 00, 07, 00, 00, 00, E8, 21, 40, 00, 06, 00, 00, 00, C0, 21, 40, 00, 07, 00, 00, 00, 40, 1E, 40, 00...
 
[+]

Entropy:
4.9788

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
24 KB (24,576 bytes)

Scan CheckOffice2010_Compatibility.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.