home

SynGUI.exe

Vba32 Update Center

VIRUSBLOKADA LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SynGUI’.
Publisher:
VIRUSBLOKADA LTD.  (signed and verified)

Product:
Vba32 Update Center

Description:
Vba32 Update Center GUI

Version:
3.12.6.2

MD5:
e8339fd55b9df5ab9de66305b765001d

SHA-1:
15582a7f6c1a6accd6202a9f722e8981ec57c5f6

SHA-256:
9ecbca8c5bf5acd7d015cf0f41fa06094993af434411dff5f6f6175f9037fe91

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 10:18:34 PM UTC  (today)

File size:
593.4 KB (607,624 bytes)

Product version:
3.12.6.2

Copyright:
Copyright 1993-2012 VirusBlokAda Ltd.

Original file name:
SynGUI.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\vba32 update center\syngui.exe

Digital Signature
Signed by:
VIRUSBLOKADA LTD.

Authority:
VeriSign, Inc.

Valid from:
1/29/2010 2:00:00 AM

Valid to:
1/31/2012 1:59:59 AM

Subject:
CN=VIRUSBLOKADA LTD., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VIRUSBLOKADA LTD., L=Minsk, S=none, C=BY

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2BEF4F72149367BCC7775D0000909C1D

File PE Metadata
Compilation timestamp:
12/30/2011 2:46:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:BEqWQOcArKoikMvWsu/6FHpkxJHU5tQSoZQ:ijVikMvWsu/6RpkxJHU5t5oZQ

Entry address:
0x4686F

Entry point:
E8, 52, E1, 00, 00, E9, 16, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 18, C0, 47, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 18, C0, 47, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Code size:
392 KB (401,408 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SynGUI

Command:
"C:\Program Files\vba32 update center\syngui.exe"


Scan SynGUI.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.