» wocobrowse.exe
Overview
Analysis
File Details
Programs (3)

wocobrowse.exe

FastViewer

FastViewer GmbH und Co KG

File name:

wocobrowse.exe

Publisher:

Fastviewer.com (signed by FastViewer GmbH und Co KG)

Product:

FastViewer

Version:

3.00.0022

MD5:

fe5e66db05c5196cf41f8779f2dc5382

SHA-1:

a719d213280fd8ccd29bafdcf196c06af7111357

SHA-256:

8782607cc03ba7dbb90d0c19141f9d23056da9752e7cd0abb6a9310290c87bfa

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 11:48:28 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/PECompact

7.1.1

File size:

1.1 MB (1,184,528 bytes)

Product version:

3.00.0022

Original file name:

FastViewer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\whoson2012\wocobrowse.exe

Digital Signature

Signed by:

FastViewer GmbH und Co KG

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/2/2009 1:00:00 AM

Valid to:

11/11/2011 11:59:59 PM

Subject:

CN=FastViewer GmbH und Co KG, OU=SECURE APPLICATION DEVELOPMENT, O=FastViewer GmbH und Co KG, L=Neumarkt in der OPf, S=Bayern, C=DE

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

5ABA24A7860039CD7C898AA4E1C9CDAE

File PE Metadata

Compilation timestamp:

12/4/2009 3:25:02 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:iarDLAqsHEkC/161jJSdMAuQGV6g18eXxAa/e5:BvpfEPSdCZFSIe5

Entry address:

0x1000

Entry point:

B8, 74, BC, 95, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 7A, 7A, ED, B8, 2E, E6, 87, 40, 9C, 33, B9, 9C, E3, AF, 42, 6E, 56, 2B, 92, 80, 7F, 9B, BD, 2F, 65, 85, F6, 21, 25, C9, D4, 63, 6C, 67, B8, F4, 3C, AB, 73, 28, 69, 76, A0, 50, 2E, E1, 8B, 07, 82, 3B, 79, 0B, B2, 57, E2, F6, 3C, 41, 18, 74, 34, BD, 7C, A3, DE, 84, C8, 59, 9E, F6, A3, 9A, FD, 1F, F3, 9D, 34, A3, C2, D7, 86, 01, F2, F7, C9, 41, 7A, 2E, FC, F8, E6, D3, 0C... 
[+]

Entropy:

7.9532

Packer / compiler:

PECompact v2

Code size:

2.8 MB (2,945,024 bytes)

The file wocobrowse.exe has been discovered within the following programs.

Client~Connexion Client by Client~Connexion

About 9% of users remove it

WhosOn 2012 Client by Parker Software

About 3% of users remove it

WhosOn 2012 Hosted Edition Client by Parker Software

About 3% of users remove it

Scan wocobrowse.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.