home

grid switch.exe

Gridswitch.co.kr

Publisher:
Gridswitch.co.kr

Description:
Grid Switch v2.2p

Version:
2.2.1.0

MD5:
9ff99dfe93b3a5537ae4aa4a79d953aa

SHA-1:
eda75e84e8dc573cba40cf3144a391ad0b8fcf64

SHA-256:
310684ce8a5a5e1e800378c54e398651a0d95b79392b045f429fbd01c8dd787b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:41:13 AM UTC  (today)

File size:
264.5 KB (270,848 bytes)

Product version:
2.2.1.0

Copyright:
Copyright (C) 2011 W.T.Choi

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
11/19/2011 10:53:27 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:sxBwT/cCs17U4OJfjA6U7dorN46oSyGItPQnurvUjjmUkgqtrow2iOpTLALv6urp:RcCs17uC7R6lR+XWmcyrow/rtXP

Entry address:
0x1364C

Entry point:
E8, 5E, 3C, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, 70, C7, 43, 00, FF, 15, 80, C0, 41, 00, 85, C0, 75, 18, 56, E8, A5, 15, 00, 00, 8B, F0, FF, 15, 38, C0, 41, 00, 50, E8, 55, 15, 00, 00, 59, 89, 06, 5E, 5D, C3, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, C8, D5, 45, 00, 00, 74, 05, E9, 8E, 3C, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B...
 
[+]

Entropy:
5.2685

Code size:
106.5 KB (109,056 bytes)

The file grid switch.exe has been seen being distributed by the following 7 URLs.

https://mail.naver.com/file/download/.../?mailSN=5603&attachIndex=2&virus=1&domain=mail.naver.com&u=sdc02275

http://blogattach.naver.net/27b23b889ec7c31f31d0b785b05c265dfea657b55f/20150212_236_blogfile/.../Grid_Switch_v2.2.1p.exe

http://cfile10.uf.tistory.com/.../117119394EC7B63220F682

http://cfile1.uf.tistory.com/.../1444304950D1E3EE1E6F2C

http://imrich.tistory.com/.../cfile1.uf@1444304950D1E3EE1E6F2C.exe

http://cafeattach.naver.net/2db8318295cdc9153bdfbf88ba552a56f1a75dbd7a/20131231_160_cafefile/.../grid_switch_v2.2.1p.exe

http://gridswitch.tistory.com/.../cfile10.uf@117119394EC7B63220F682.exe

Scan grid switch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.