home

grizzlyav.exe

GRIZZLY Antivirus

NANO Security Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘GRIZZLY Antivirus’.
Publisher:
Grizzly Ltd  (signed by NANO Security Ltd)

Product:
GRIZZLY Antivirus

Description:
GRIZZLY Antivirus component

Version:
1.0.32.308

MD5:
61293877762c8b08b7a5ab3f70469732

SHA-1:
f16ce14c1d14cb3196229c6e433fbff70dd81f3e

SHA-256:
9e46696fa736eee141bb8add8df2e71c1456e2fbe31433f09e1d3a398af4050a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:49:42 AM UTC  (today)

File size:
9.5 MB (9,980,640 bytes)

Product version:
1.0.32.308

Copyright:
Copyright (C) 2016 NANO Security

Original file name:
grizzlyav.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\grizzly antivirus\bin\grizzlyav.exe

Digital Signature
Signed by:
NANO Security Ltd

Authority:
GlobalSign nv-sa

Valid from:
5/26/2016 6:59:41 PM

Valid to:
5/27/2017 3:36:12 PM

Subject:
CN=NANO Security Ltd, O=NANO Security Ltd, L=Bryansk, S=Bryansk Oblast, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - G3, O=GlobalSign nv-sa, C=BE

Serial number:
59AFDE3D8D0DCFF6689875D4

File PE Metadata
Compilation timestamp:
2/27/2017 10:42:13 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x5D8AF8

Entry point:
E8, D9, A6, 01, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 08, 83, FE, E0, 77, 6F, 53, 57, A1, D4, 11, E0, 00, 85, C0, 75, 1D, E8, 51, A4, 01, 00, 6A, 1E, E8, A7, A4, 01, 00, 68, FF, 00, 00, 00, E8, 0E, B1, 00, 00, A1, D4, 11, E0, 00, 59, 59, 85, F6, 74, 04, 8B, CE, EB, 03, 33, C9, 41, 51, 6A, 00, 50, FF, 15, F8, E3, A4, 00, 8B, F8, 85, FF, 75, 26, 6A, 0C, 5B, 39, 05, 1C, 1A, E0, 00, 74, 0D, 56, E8, 1A, 26, 01, 00, 59, 85, C0, 75, A9, EB, 07, E8, 01, 64, 00, 00, 89, 18, E8, FA, 63, 00, 00, 89, 18, 8B...
 
[+]

Code size:
6.3 MB (6,603,776 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
GRIZZLY Antivirus

Command:
"C:\Program Files\grizzly antivirus\bin\grizzlyav.exe" gui \startup


Scan grizzlyav.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.