CubeCentral

You're welcome! I re-downloaded it from the author's website on another PC and confirmed the hash: MD5 SHA-1 ------------------------------------------------------------------------- b806596b3a2e3d6c31a3c35d2fda363e c5beeaef85c8e9b1481fe5974e3bfe1481c1add4 xvi32.exe Since the new copy I downloaded, and the "installed" copy which got flagged were identical, I felt confident that it was a False Positive. I've also e-mailed the author asking him to post a hash on his website so that future questions of his program's validity may be quickly determined. Cheers!

This program is a very old Hex Editor that has been around for years. This morning Malwarebytes reported it as having "Ransom.Dharma" after many many previous scans completing without a detection. Please find attached the log file and the two files in a zip file. XVI32.zip