The RQ-2710.msi File Analysis

Updated 3 months ago

Checked by Malaware Check

RQ-2710.msi

Technical Analysis

File Name	RQ-2710.msi
File Type	Windows Installer
Magic Bytes	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: AteraAgent, Author: Atera networks, Keywords: Installer, Comments: This installer database contains the logic and data required to install AteraAgent., Template: Intel;1033, Revision Number: {721AD955-79FD-4019-BBF5-9DCC4C1175BB}, Create Time/Date: Wed Feb 28 10:52:02 2024, Last Saved Time/Date: Wed Feb 28 10:52:02 2024, Number of Pages: 200, Number of Words: 6, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2
SSDEEP Hash	49152:U+1Ypn4N2MGVv1zyIBWGppT9jnMHRjOOozjcqZJN8dUZTwYaH7oqPxMbY+K/tzQz:U+lUlz9FKbsodq0YaH7ZPxMb8tT
Scanner Version	1.0.210.174
Database Version	2025-03-08 00:00:34 UTC

⚠

Suspicious File Detected

Detected by 12 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

19%

Detection Rate

2,994,176

File Size (bytes)

12/63

Engines Detected

2025-03-08

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	0cba7d8f8acccf5775fc26db51863d05
SHA1	bd913e189a94039d7ed95d1f94ea466abbcfac37
SHA256	42783ab3dd908c9efe471af6d458b1f39dd20c1f78830c81e43fdd08b0cddb62
SHA512	c9bd4982bbeff0eba791fc908cfb7db84352e22b42e7b1459ba029673a3a49eef51c4147789f4a311d9d4503f35eb6f3880efce9924538003c9833b29d8645db

Security Engines with Detections (12 of 63)

Skyhigh

RemAdm-Atera Malicious

McAfee

RemAdm-Atera Malicious

K7AntiVirus

Trojan ( 0001140e1 ) Malicious

K7GW

Trojan ( 0001140e1 ) Malicious

Kaspersky

not-a-virus:HEUR:RemoteAdmin.MSIL.Atera.gen Malicious

DrWeb

Program.RemoteAdminNET.1 Malicious

Varist

W32/Atera.KNVS-6994 Malicious

Antiy-AVL

RiskWare[RemoteAdmin]/MSIL.Atera Malicious

Xcitium

ApplicUnwnt@#2s9re1zdfn0go Malicious

Google

Detected Malicious

AhnLab-V3

Unwanted/BIN.RemoteAdmin Malicious

Rising

HackTool.Atera!8.13A3B (CLOUD) Malicious

51 engines reported no threats - Only engines with detections are shown above for clarity

Certificate Chain Analysis

Certificate Information

Signing Date	08:24 PM 03/07/2025 (91 days ago)
Verification Status	Signed
Signers	Atera Networks Ltd; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers	DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

Signed

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

12 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now