home

roguekiller.exe

RogueKiller

Adlice Software

Publisher:
Adlice Software

Product:
RogueKiller

Description:
Anti-malware tool

Version:
8.8.15

MD5:
240dda08f6ee9290747d1a04a99d1cca

SHA-1:
463c2ab95b2d921f01ed5c407c6c5f54982abb20

SHA-256:
1a7db635f24ca4d5795ff790aee6d2bd529a6f275bec435d7a61fc222948c09a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/4/2024 5:09:52 PM UTC  (today)

File size:
3.8 MB (3,972,608 bytes)

Product version:
8.8.15

Copyright:
Copyright Adlice Software (C) 2013

Original file name:
RogueKiller

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\users\{user}\downloads\roguekiller.exe

File PE Metadata
Compilation timestamp:
3/28/2014 8:12:56 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:gyhggKBS5Rww8Xzp/vkxsSCQu6NiMpFjUIuJ8nT:+gKBS6dgTjUdC

Entry address:
0x15EEB0

Entry point:
E8, 13, 78, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, 04, 27, 5F, 00, FF, 15, FC, 42, 59, 00, 85, C0, 75, 18, 56, E8, 46, 36, 00, 00, 8B, F0, FF, 15, C8, 42, 59, 00, 50, E8, F6, 35, 00, 00, 59, 89, 06, 5E, 5D, C3, 8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 83, FB, E0, 77, 6F, 56, 57, 83, 3D, 04, 27, 5F, 00, 00, 75, 18, E8, 92, 6B, 00, 00, 6A, 1E, E8, DC, 69, 00, 00, 68, FF, 00, 00, 00, E8, 0D, 65, 00, 00, 59, 59, 85, DB, 74, 04, 8B, C3, EB, 03, 33, C0, 40...
 
[+]

Entropy:
6.0622

Code size:
1.6 MB (1,648,128 bytes)

The file roguekiller.exe has been discovered within the following program.

ZHPDiag 2014  by Nicolas Coolman
Publisher's description - “Diagnostic Software developed by Nicolas Coolman. This tool allows a quick and thorough diagnosis of the operating system. It scans the Registry and lists the sensitive areas that may be pirated. It is based on a system of white list per module which allows for shorter reports.”
nicolascoolman.webs.com
3% remove it
 
Powered by Should I Remove It?

The file roguekiller.exe has been seen being distributed by the following 9 URLs.

http://www.commentcamarche.net/download/.../telecharger-34083203-roguekiller

http://api.viglink.com/api/click?format=go&jsonp=vglnk_jsonp_13990602315386&key=59ca95b761b973f7093283b921e56892&libId=238283ae-dfb4-4451-80c2-f381f20fd4f1&loc=http://www.bleepingcomputer.com/forums/t/490939/crecyclebin-trojan/&v=1&out=http://tigzy.geekstogo.com/.../RogueKiller.exe&title=C:\Recycle.Bin Trojan - Virus, Trojan, Spyware, and Malware Removal Logs&txt=RogueKiller

http://adlice.com/softs/.../RogueKiller.exe

http://www.tamindir.com/indir/MjAxNC0wNS0xOSAxNzoyNToxNw==/roguekiller/.../8.8.15

http://www.surlatoile.org/.../RogueKiller.exe

http://www.adlice.com/softs/.../RogueKiller.exe

http://www.sur-la-toile.com/.../RogueKiller.exe

http://tigzy.geekstogo.com/.../RogueKiller.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.