home

refer-12931.exe

Vba32 Quarantine

VIRUSBLOKADA ODO

Publisher:
VirusBlockAda Ltd.  (signed by VIRUSBLOKADA ODO)

Product:
Vba32 Quarantine

Description:
Quarantine Maintenance GUI

Version:
3.12.0.0

MD5:
6b43b08734fcc069bd7302cc41e532a5

SHA-1:
029ac2bab5412444bfc66c42e555b907074c3217

SHA-256:
7c4de9c417d9701b78d0258c1d95b0fc183a2b7a7cbfda3b7568668fe356eccc

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/27/2024 4:14:12 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Generik.FNCENWD (variant)
10.9120

Fortinet FortiGate
W32/Shiz.NCF!tr
12/10/2016

File size:
77.9 KB (79,800 bytes)

Product version:
3.12.0.0

Copyright:
Copyright (C) 1993 - 2012 by VirusBlokAda Ltd.

Original file name:
QtnMaintGUI.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\refer-12931.exe

Digital Signature
Signed by:
VIRUSBLOKADA ODO

Authority:
VeriSign, Inc.

Valid from:
2/22/2012 7:00:00 AM

Valid to:
2/22/2014 6:59:59 AM

Subject:
CN=VIRUSBLOKADA ODO, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VIRUSBLOKADA ODO, L=Minsk, S=BY, C=BY

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2DA05BBFA05778B979ACB88C01FF8E27

File PE Metadata
Compilation timestamp:
7/24/2012 3:15:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

Entry address:
0x2AB0

Entry point:
55, 8B, EC, 83, EC, 70, C7, 05, 20, FE, 40, 00, CD, 1A, 00, 00, 6A, 00, FF, 15, FC, B0, 40, 00, 89, 45, CC, 6A, 35, 68, 7A, FE, 40, 00, 68, 67, FE, 40, 00, 6A, 3B, 57, 8B, 15, D0, FD, 40, 00, 52, 6A, 3D, 8D, 05, 7F, FD, 40, 00, 50, E8, CD, F6, FF, FF, 08, C0, 75, 0D, 81, EE, 27, 00, 00, 00, 33, DB, B8, 24, 00, 00, 00, 89, 45, EC, BE, 74, 00, 00, 00, 69, F6, 6A, FA, 3F, 00, 8B, DE, 31, 5D, DC, 83, 2D, 4B, FE, 40, 00, 54, 81, 2D, 04, FE, 40, 00, 27, 14, 28, 00, 6A, 00, FF, 15, E8, B0, 40, 00, A3, 90, FD, 40...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
40 KB (40,960 bytes)

Scan refer-12931.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.