» IDPatroller.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

IDPatroller.exe

ID Patroller

Silver King Media LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ID Patroller’. This is installed with ID Patroller.

File name:

IDPatroller.exe

Publisher:

IDpatroller (signed by Silver King Media LLC)

Product:

ID Patroller

Version:

2.3.18.0

MD5:

e5b46206dc17bd8b367a59fc3933707e

SHA-1:

329999d859217329d9c4c517a8fdfef25f16fa5a

SHA-256:

8bfad711f31bf0f997abdac5d9afbff82a6b160327333e7e92f65d3e2c591b61

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 1:24:52 AM UTC (today)

File size:

6.4 MB (6,688,344 bytes)

Product version:

2.3.18.0

Trademarks:

Original file name:

IDPatroller.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\id patroller\id patroller\idpatroller.exe

Digital Signature

Signed by:

Silver King Media LLC

Authority:

COMODO CA Limited

Valid from:

5/30/2013 8:00:00 PM

Valid to:

5/31/2014 7:59:59 PM

Subject:

CN=Silver King Media LLC, O=Silver King Media LLC, STREET=7321 1st Ave South, L=St. Petersburg, S=FL, PostalCode=33707, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

580FA8E45D391317D8B65BD2FC65C55B

File PE Metadata

Compilation timestamp:

5/30/2014 10:43:10 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

196608:NqrntVWEyoWNqufn9fMLfpX3CNeRYI/BYZh:UrnLiogqufnlqXywRYCiH

Entry address:

0x363B0

Entry point:

FF, 25, A0, 63, 43, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, B4, 00, 00, 00, CE, CA, EF, BE, 01, 00, 00, 00, 91, 00, 00, 00, 6C, 53, 79, 73, 74, 65, 6D, 2E, 52, 65, 73, 6F, 75, 72, 63, 65, 73, 2E, 52, 65, 73, 6F, 75, 72, 63, 65, 52, 65, 61, 64, 65, 72, 2C, 20, 6D, 73, 63, 6F, 72, 6C, 69, 62, 2C, 20, 56, 65, 72, 73, 69, 6F, 6E, 3D, 32, 2E, 30, 2E, 30, 2E, 30, 2C, 20, 43, 75, 6C, 74, 75, 72, 65, 3D, 6E, 65, 75, 74, 72, 61, 6C, 2C, 20, 50, 75... 
[+]

Entropy:

7.9577 (probably packed)

Code size:

6.3 MB (6,656,512 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

ID Patroller

Command:

"C:\Program Files\id patroller\id patroller\idpatroller.exe" "\min"

The file IDPatroller.exe has been discovered within the following program.

ID Patroller by IDpatroller.com

Publisher's description - “With ID Patroller, one click will begin a scan of your system, revealing all of your sensitive data that’s stored on your computer – you’ll be shocked and amazed at the sheer amount of identifying information that ID Patroller uncovers! Think about how many times you’ve entered your name, address, and telephone number into an online form – unless you use ID Patroller to erase it, that info is still there! ID Patroller works by scanning for and getting rid of (or encrypting) that information so that if hackers try to harvest your personal data they get nothing, that’s right! NOTHING.”

www.IDpatroller.com

About 4% of users remove it

Scan IDPatroller.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.