I can't figure out what or who this is

5F9BAA2D-0994-4087-8DE9-3ED74FD92B0C

Does it really have something to do with Comodo?

1

Hello, I and the friends who read this message need more information, we don’t know what you’re talking about.

Please send more evidence and build a narrative of what’s happening to you, with images and examples.

Thanks for your questions.
I don’t have any more information and I don’t know where it came from. I just discovered it right away and only know what’s in the attachments… I don’t know where it came from, what it is, or anything else. When I click on it, I only get what’s shown in the appendices, under “List of Software Vendors.”
So I don’t know where it came from? It was there suddenly, out of nowhere. I didn’t rate it either.

Since I don’t know who it is, what it is, or where it comes from, I’ve changed the rating to malicious, even though Comodo is listed as the software provider.

Paranoid on my part :face_with_spiral_eyes:: I’ve become more cautious since AI.

Could it be a problem between Windows 11 and Comodo?

[grid]




5

Another note (File Rating I changed to Malicious):

1 Like

Hello, after I looked at the images you posted here on the forum, I went to see on my CIS if there is anything similar to this, to my surprise there are more with another numbering.

I’m still surprised, I don’t know what it is, but based on the image you posted, I think it’s an app from the Windows Store, but I’m not sure.

I’ll be waiting for someone to have an answer to our questions.

Thank you for reporting this.

After a few minutes I went to research which providers were causing this error in my case.

The identifier EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 appears to be a GUID (Globally Unique Identifier) ​​used by Windows to represent system components, such as drivers, services, device classes, or software providers.

This format is often used to identify:
Event providers (Event Tracing for Windows - ETW)
Security providers (antivirus, firewall)
COM/CLSID components
Windows services
Installed drivers


This identifier 24803D75‑212C‑471A‑BC57‑9EF86AB91435 is a Publisher GUID used by Windows to sign packages from the Microsoft Store. In context, it is associated with WhatsApp Desktop installed via the Store. This appears in AppLocker and Intune policies to block the app.

In practice, this GUID represents the certificate used by Microsoft to authenticate the WhatsApp installer. Therefore, the “publisher” is WhatsApp Inc., distributed as WhatsApp Desktop in the Microsoft Store.

1 Like

What you have to do is search for this supplier on ChatGPT, and ask it to tell you which supplier it is and enter the ID. It will tell you what it is.

That’s how I was able to find out what it was in my case. :grinning:

Thank you for your reply. The suggestion to use ChatGPT was really good. This is my first time using ChatGPT. Here’s the process (translated from German to English with Google-Translator):

1) Request for this: 5F9BAA2D-0994-4087-8DE9-3ED74FD92B0C

Does it really have something to do with Comodo?

Reply from ChatGPT :

The string you provided, “5F9BAA2D-0994-4087-8DE9-3ED74FD92B0C,” looks like a UUID (Universally Unique Identifier). UUIDs are unique identifiers commonly used in databases, software development, and systems to uniquely identify objects or records.

Without further context, I can’t say who or what this particular UUID is associated with.

If you found it in a specific system, application, or database, that might be where the association occurs. Please provide me with more information so I can better help you!

2. Request for this: SHA-1

SHA-1 is 8645721AF1F7â– â– â– 833E7B5E53D82AC7F5C85BEEC

Note: The SHA-1 has been changed by comodo, the three _ _ _

Reply from ChatGPT :

Hello! Thanks for providing the SHA-1 hash. Unfortunately, I can’t tell what the hash refers to from the hash value itself. SHA-1 hashes are a type of digital fingerprint that are often used to identify data or files without knowing the actual content. If you can give me more context, for example, what the hash refers to, I’d be happy to help!

3. Request for this: The file name is monitorian.reg.exe

Reply from ChatGPT :

Thank you for the additional information! The file name “monitorian.reg.exe” sounds like an executable file, possibly associated with a program or application. The name “monitorian” could indicate software related to monitors or display settings.

However, it’s important to be cautious, as executable files with the “.exe” extension can be potentially harmful, especially if they come unexpectedly or from unknown sources.

If you’d like, I can give you tips on how to check if this file is safe or help you with any further questions!

4. Request for this: The software vendor’s name is listed as: 5F9BAA2D-0994-4087-8DE9-3ED74FD92B0C

Reply from ChatGPT :

Hello! The software vendor’s name doesn’t seem to be directly visible in the information you provided. Instead, it looks like the information is some kind of identification or license key. If you want to know the exact name of the software vendor, it might be helpful to look for more details in the relevant documents or on the website. I’d be happy to help if you have any more information!


END!

Unfortunately, I don’t have any more information than I have entered here.

Edit: Something just occurred to me: I once had problems with Imperva (several days ago, not months) , security software primarily for businesses (I mentioned it in your thread). I don’t know how this software managed to sneak onto my PC. That would be the only explanation for me. But I tried PDF software and backup software, all from reputable sources. I never had any problems with them either. I’d tried them a while ago, but then found better alternatives. But I never used Imperva, never installed it, and never knew about it.

2 Likes