» vb decompiler.exe
Overview
Analysis
File Details
Programs (1)

vb decompiler.exe

VB Decompiler

DotFix Software

This file is installed with the program VB Decompiler Pro.

File name:

vb decompiler.exe

Publisher:

DotFix Software (signed and verified)

Product:

VB Decompiler

Description:

Decompiler for p-code and native code files

Version:

9.2.0.0

MD5:

9d5f6489806a1ea7228cba926bb009b7

SHA-1:

9ef1693ab7581d6138ebb672d9ae9728690eb8f5

SHA-256:

42447db473ae640cfb343543da2cb5bf8cffafc92dec9abed61a9c1024183d2b

Scanner detections:

4 / 68

Status:

Clean (4 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/25/2024 10:59:08 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Suspicious

7.1.1

McAfee

Artemis!9D5F6489806A

5600.7215

Trend Micro House Call

PAK_Generic.009

7.2.50

Trend Micro

PAK_Generic.009

10.465.19

File size:

3 MB (3,148,944 bytes)

Product version:

9.2.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\vb decompiler pro\vb decompiler.exe

Digital Signature

Signed by:

DotFix Software

Authority:

COMODO CA Limited

Valid from:

7/15/2012 4:00:00 AM

Valid to:

7/16/2013 3:59:59 AM

Subject:

CN=DotFix Software, O=DotFix Software, STREET=Nekrasova str. 7, L=Tula, S=Tulskaya obl., PostalCode=300045, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00F3976D4C7DBBEE87A0D211C51894BA32

File PE Metadata

Compilation timestamp:

11/12/2012 11:50:29 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:CTu8klVYF8/474qGZnZ6ATMVM4RMMhMBBrgcPmQ3:CSFeF8g0XZnVLe+

Entry address:

0x7739150

Entry point:

60, E8, 00, 00, 00, 00, 5D, 81, ED, 06, 00, 00, 00, 81, ED, 50, 91, 73, 07, E9, 4C, 00, 00, 00, 45, 4E, 49, 47, 4D, 41, 03, 3C, DC, 07, 0B, 00, 0C, 00, 13, 00, 35, 00, 1C, 00, D1, E0, 48, AA, 21, 3C, 4D, 75, 7A, 3F, 47, 1E, DD, 04, AF, CB, EC, 95, 14, 19, 01, 00, 00, 00, 89, 8A, 47, 27, 78, 91, 08, 0E, 2F, 0F, 26, 2B, 9E, 3E, C9, 79, 9C, 8B, 4F, 60, 7F, 01, F5, A4, D3, 55, E0, 72, 5A, BD, 80, C3, E9, 04, 00, 00, 00, 0E, 40, C7, 3F, B8, 50, 91, 73, 07, 03, C5, 81, C0, 93, 00, 00, 00, B9, 30, 06, 00, 00, BA... 
[+]

Entropy:

7.9829 (probably packed)

Code size:

115 MB (120,537,088 bytes)

The file vb decompiler.exe has been discovered within the following program.

VB Decompiler Pro by DotFix Software

Publisher's description - “VB Decompiler is decompiler for programs (EXE, DLL or OCX) written in Visual Basic 5.0 and 6.0 and disassembler for programs written on .NET technology. As you know, programs in Visual Basic can be compiled into interpreted p-code or into native code. .”

www.vb-decompiler.org

5% remove it

Scan vb decompiler.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.