home

ca_kh_noplacelikegnome_digikit.exe

KateHadfield Digikit, NoPlaceLikeGnome

Serif (Europe) Ltd

This is a self-extracting archive and installer. This is installed with multiple programs including DaisyTrail Christmas Crafts Digikit and DaisyTrail Posters Digikit. The file has been seen being downloaded from dt-live.s3.amazonaws.com and multiple other hosts.
Publisher:
Serif (Europe) Ltd., support@serif.co.uk  (signed by Serif (Europe) Ltd)

Product:
KateHadfield Digikit, NoPlaceLikeGnome

Description:
Kate Hadfield Digikit Setup

Version:
1.0.0.0

MD5:
3c31249338e246ff6467004d803b7bc9

SHA-1:
399c639cac02a60548374d3d1a3a8fc2cfa6e43c

SHA-256:
b650b7dd5d7a4a6c47d8ed5c79eb4f214453dfb4a37468bba181383042f858d6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 11:35:53 AM UTC  (today)

File size:
12.3 MB (12,944,136 bytes)

Product version:
1.0.2.037

Copyright:
DaisyTrail © 2013 Serif (Europe) Ltd. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ca_kh_noplacelikegnome_digikit.exe

Digital Signature
Signed by:
Serif (Europe) Ltd

Authority:
VeriSign, Inc.

Valid from:
3/3/2013 5:00:00 PM

Valid to:
5/2/2016 5:59:59 PM

Subject:
CN=Serif (Europe) Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Serif (Europe) Ltd, L=Nottingham, S=Nottinghamshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6263FDB9B1714CD0382337F8533C8D00

File PE Metadata
Compilation timestamp:
6/19/1992 4:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:PReZ0KegsusmGfW/yFsI3zvSUySnOcYFAxfbuU:PRVg3x7cvSEMsbL

Entry address:
0x3274

Entry point:
55, 8B, EC, 83, C4, F4, B8, 3C, 32, 01, 00, E8, 98, E9, FF, FF, E8, 43, FF, FF, FF, E8, 7E, FF, FF, FF, E8, 15, FE, FF, FF, E8, AC, E4, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9850

Developed / compiled with:
Microsoft Visual C++

Code size:
9 KB (9,216 bytes)

The file ca_kh_noplacelikegnome_digikit.exe has been discovered within the following programs.

DaisyTrail American Holidays 2011 Digikit  by Serif (Europe) Ltd
This is a DaisyTrail Digikit Collection that contains a selection of themed embellishments, materials, background, frames, brushes and predesigned layouts.
www.serif.com
About 7% of users remove it
DaisyTrail Christmas Crafts Digikit  by Serif (Europe) Ltd
Christmas Crafts is a DaisyTrail Digikit Collection that contains a selection of themed embellishments, materials, background, frames, brushes and predesigned layouts.
About 5% of users remove it
DaisyTrail Halloween 2012 Digikit  by Serif (Europe) Ltd
About 4% of users remove it
DaisyTrail Mother's Day 2012 Digikit  by Serif (Europe) Ltd
About 3% of users remove it
DaisyTrail Posters Digikit  by Serif (Europe) Ltd
About 2% of users remove it
DaisyTrail Valentine's 2012 Digikit  by Serif (Europe) Ltd
Publisher's description - “DaisyTrail Valentine's 2012 Digikit is a free software that allows you to create your own certificates with CraftArtist and this fantastic free kit.Show your loved ones you care this Valentine's by making them something special using this fabulous free kit.”
About 8% of users remove it
 
Powered by Should I Remove It?

The file ca_kh_noplacelikegnome_digikit.exe has been seen being distributed by the following 3 URLs.

http://dt-live.s3.amazonaws.com/media/.../CA_KH_NoPlaceLikeGnome_Digikit.exe

http://www.daisytrail.com/media/.../CA_KH_NoPlaceLikeGnome_Digikit.exe

http://www.daisytrail.com/download.sha?downloadid=115

Scan ca_kh_noplacelikegnome_digikit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.