home

6320262.exe

https:\\Setaward.cz

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
https:\\Setaward.cz

Version:
3.01.0002

MD5:
3cbf43411e61e07f0ac4837aef855f25

SHA-1:
407ff92ecc5a6f060e0e9b608db19b1409662e15

SHA-256:
54abe5d80afc1cb522f85a0b47f2f0ad87b4e2d45701b1d6f69c6e0ee1a9b13e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 3:19:14 AM UTC  (today)

File size:
181.5 KB (185,848 bytes)

Product version:
3.01.0002

Copyright:
https:\\Setaward.cz

Trademarks:
https:\\Setaward.cz

Original file name:
Filter.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\6320262.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 4:57:40 PM

Valid to:
3/7/2011 4:57:40 PM

Subject:
CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6115230F00000000000A

File PE Metadata
Compilation timestamp:
1/12/2016 10:55:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:tI+ubCFw0+0Lm3iPtKLlliFsFzr0vCcym:tI+u2i0+0MTLlliFsJ2Ccym

Entry address:
0x12AC

Entry point:
68, A8, A9, 41, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 3F, D5, C0, 3D, E5, EA, 05, 47, AC, A0, E7, 48, 31, 2F, A0, 4D, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 20, 20, 20, 20, 20, 20, 44, 61, 75, 65, 72, 7A, 75, 73, 74, 61, 6E, 64, 65, 73, 00, 61, 00, 00, 00, 00, FF, CC, 31, 00, 06, 9F, 24, 57, 43, 89, 10, 38, 4B, 97, BF, E5, D7, F7, 22, 39, 3F, 70, 86, 9F, 53, 9C, 01, 19, 42, 9E, 2D, 9E, 4D, BB, 71, 16, 72, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.1690

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
152 KB (155,648 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.