home

giospsm.exe

Gios PDF Splitter and Merger

Paolo Gios - http://www.paologios.com

This is a setup program which is used to install the application. The file has been seen being downloaded from dc167.4shared.com and multiple other hosts.
Publisher:
Paolo Gios - http://www.paologios.com

Product:
Gios PDF Splitter and Merger

Description:
Gios PDF Splitter and Merger for Windows

Version:
2.0.2009.0701

MD5:
b23cd1b240ae7dacc46164a326681139

SHA-1:
92c4bce9ebed8752604e47a1ce0db64062849d05

SHA-256:
971e5183b42c2b3f2d93858ed5aab097ecf8bd90960047f0d1c60c6415b1d79b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/4/2025 3:01:56 AM UTC  (today)

File size:
145 KB (148,480 bytes)

Product version:
2.0.2009.0701

Copyright:
Copyright © 2009

Original file name:
Gios.PSM.Windows.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\giospsm.exe

File PE Metadata
Compilation timestamp:
7/1/2009 12:58:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:lDtX09UMufQEPo84WSKVBkK/I/Ko73Wm1Zvrof37MSuio88WSKVB+:htX09UMufQEPo84+rC47Myo88+

Entry address:
0x2237A

Entry point:
FF, 25, 88, 23, 42, 00, 00, 00, 00, 00, 00, 00, 00, 00, 5C, 23, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 46, 41, 4B, 4A, 00, 00, 00, 00, 02, 00, 00, 00, 4A, 00, 00, 00, AC, 23, 02, 00, AC, 05, 02, 00, 52, 53, 44, 53, E2, 0B, F6, 7E, 0A, 89, A2, 42, A9, 6F, E0, F8, 1D, B1, 8D, 00, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 70, 61, 6F, 6C, 6F, 2E, 67, 69, 6F, 73, 5C, 44, 6F, 63, 75, 6D, 65, 6E, 74, 73, 5C, 73, 72, 63, 5C, 62, 69, 6E, 5C, 47, 69, 6F, 73, 50, 53, 4D, 2E, 70, 64, 62, 00, 00, 00, 00, 00...
 
[+]

Code size:
129 KB (132,096 bytes)

The file giospsm.exe has been seen being distributed by the following 7 URLs.

http://dc167.4shared.com/download/.../GiosPSM_unir_PDF.exe

https://docs.google.com/uc?id=0BxLGlUFOCSz5UU9QMGdSaExLRWM&export=download

http://ead.saojudastadeu.com.br/file.php/.../GiosPSM.exe

https://docs.google.com/uc?authuser=0&id=0BxLGlUFOCSz5UU9QMGdSaExLRWM&export=download

https://docs.google.com/uc?id=0B827GBTO-1ZoS2FWUEdFWUozS2c&export=download&invite=CIK1kLEL

https://www.dropbox.com/sh/p7umc0lifok77tv/.../GiosPSM.exe

http://s10062.chomikuj.pl/File.aspx?e=sebqAwvlQIHpwD5RN6Ynf-8fy6efuh98s6M72Ol_E7-fA3pRzsdJ6xp-kUcV7FcQEt25MLIPYYfQEspVdaMTADo20Ber01XTCGpdiMa46-CMyCtguZrpaDRp18m75kO9bb0YOt7PHkE-DrdEb0YyEAMSPY3wOzYQNeydTtXxJ7k&pv=2

Scan giospsm.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.