Files signed by Microsoft Code Signing PCA 2011

Microsoft Code Signing PCA 2011

Microsoft Code Signing PCA 2011 is a digital signature publisher name observed in ThreatInfo records. This page groups 30 signed files and shows whether those files are currently classified as clean, undefined, or detected.

A digital signature can help identify a publisher, but it does not always prove that a file is safe. Certificates may be abused, stolen, expired, or attached to modified installers, so the file hash and detection status should be checked together.

Detection signal

Detected files use this signature name

At least one file signed as Microsoft Code Signing PCA 2011 is detected by GridinSoft. Review the hashes below and scan the device if one of these files is present.

Download GridinSoft scanner
Umm2[1].exe becdce3289da746b1132421f1bb9b5c8 Trojan.Amadey
Umm2[1].exe a3a79ebb6fb638ab540cabd43d039442 Trojan.Amadey
Umm2[1].exe 3e34a4079a28dd2da3595cda4b02b28f Trojan.Amadey
Random[1].exe 191febed315d7c3a620b564e99e5f3cc Ransom.Sabsik
Ads[1].exe 6e781cf49af81b961d0ab465210a35f8 Trojan.Glupteba
Ads[1].exe ac0df4ad2205468fe16fde33540fd0ee General Threat
Rh4tWSAJDMy81rV2LutFksZI.exe 7ed069479280add451568981ee74e4fb Trojan.Kryptik
Random[3].exe afdaaab1939e825d8af19ad225c90606 Trojan.Glupteba
Ads[1].exe bc12db6fb348790997239a6bebd3d57c Trojan.Glupteba
InstallSetup2[1].exe 6de6ae7b51d7e7644c988406829b0331 Ransom.Wacatac
svchost.exe 2f059e5600583eda6390081d51312296 Trojan.Gen
file300un.exe 656edac89a27c1b6ac623699ccc0e189 Ransom.Wacatac
Akh[1].exe e533f92146fcacb8caca823882b8d304 Trojan.Glupteba
Akh[2].exe 61b9f41b6764ddf5f94bfa96b049e6a3 Ransom.Wacatac
DAH4r7kgFDfTtx6w7kPBSbH8.exe 924d0fc01a22e0c9c6026fefc51666a1 Suspicious Object
cJ1xXo96xI4EMEQObCzsI12m.exe 69163f8cd516a3493d026681237ff07a Trojan.Agent
7KyhdS7CDak2oF7sxyiYqEEJ.exe 4ba67d3b9edeff8c27f96b948fe9ed9a Ransom.Sabsik
file300un[1].exe 003600bc57311bd8073c1e0e04368dc3 General Threat
file300un[1].exe a10bd0a4eb516ce74843c4b5b8d2e54f Ransom.Sabsik
file300un[1].exe c00f8146569a195b8c729c59153f85f4 Trojan.Kryptik
file300un.exe 46a804d527cc255bad3c068d588bff95 Trojan.Glupteba
file300un[1].exe 9ee0c556e1b952495a74709e6b06459a Trojan.Agent
file300un.exe 1f7fe7cc5b68e5bc6ae32bb490111307 Spy.Keylogger
file300un[1].exe 41d6a9f69dd2dc30c2fea8bdfdfcabd8 Trojan.Glupteba
file300un.exe ccc754d02cc1188f0a0477b306539065 Backdoor.Remcos
file300un[1].exe 886e5d7f4e35c0bb6164dc74bf5e371b Trojan.Glupteba
file300un.exe 18b50c6016cd5d7ff2f01b71a5e3373b Ransom.Sabsik
file300un[1].exe b76b8463d2167fa7f1feb1d562fe18ac Spy.Keylogger
file300un.exe c1d583657c7fe7973f820983fd1abb81 Ransom.Sabsik
file300un.exe d6078bbecc15a333c6171debc4488498 Ransom.Sabsik

Certificate review summary

Do not trust this signature name by itself

ThreatInfo found detected files associated with Microsoft Code Signing PCA 2011. A matching signature name should be checked together with the file hash, detection verdict, and source path.

Recommended checks

  • Open any matching file report and compare the MD5 hash.
  • Confirm the file path and download source before trusting the binary.
  • Run a GridinSoft scan if a detected file from this list is present.