home

monainside.exe

Windows services provider

SINFONI IT

Publisher:
SINFONI IT  (signed and verified)

Product:
Windows services provider

Version:
3.0.0.12

MD5:
319397cacb3883025f64c9d28825a0f2

SHA-1:
1d23d282293fca73e8c9c3cb19dec1fa51444ad3

SHA-256:
07b5e20c16e6f20e9ff223268f9ef679bb4dd9e673525bfd520ee96241e016ce

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/18/2024 1:26:36 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.XPACK.Gen2
7.11.30.172

File size:
939.9 KB (962,456 bytes)

Product version:
3.0

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Windows\System32\monainside.exe

Digital Signature
Signed by:
SINFONI IT

Authority:
GlobalSign nv-sa

Valid from:
12/15/2010 9:53:46 AM

Valid to:
12/16/2011 9:53:40 AM

Subject:
CN=SINFONI IT, O=SINFONI IT, L=LOOS, S=FRANCE, C=FR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012CE96D772A

File PE Metadata
Compilation timestamp:
1/6/2011 5:42:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:w7sWlQ6/+fg6tf7lDwRSz6WmQJV2ERaEZVN2J9u4qbk4GhXGhQ:OQ4F0ogV2ERaEfEak4SXSQ

Entry address:
0xBBB80

Entry point:
55, 8B, EC, B9, 26, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, B8, 18, A1, 4B, 00, E8, 11, B9, F4, FF, 33, C0, 55, 68, 48, D7, 4B, 00, 64, FF, 30, 64, 89, 20, A1, 70, 0F, 4C, 00, BA, 60, D7, 4B, 00, E8, 5C, 97, F4, FF, A1, 64, 10, 4C, 00, BA, 60, D7, 4B, 00, E8, 4D, 97, F4, FF, A1, 24, 14, 4C, 00, C6, 00, 01, 8D, 45, EC, E8, C9, AC, FE, FF, 8B, 55, EC, A1, 14, 12, 4C, 00, E8, 30, 97, F4, FF, A1, 7C, 14, 4C, 00, C6, 00, 00, A1, A0, 16, 4C, 00, 33, D2, 89, 10, 8B, 15, 70, 0F, 4C, 00, 8B, 12, 8D, 45, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
752.5 KB (770,560 bytes)

Scan monainside.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.