home

roguekillerx64_old.exe

RogueKiller

Adlice

Publisher:
Adlice Software  (signed by Adlice)

Product:
RogueKiller

Description:
Anti-malware remediation tool

Version:
12.4.0.0

MD5:
9cc60f4b35bcdfd5727e5e94c8298399

SHA-1:
d8dfa8403eacb6c2c53d43b3560f54529f45aa0b

SHA-256:
82bff081f2cc3b4137dbfb669d361a7319119eac527f587fd0a7b72f7d8ddde4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:18:34 PM UTC  (today)

File size:
12.1 MB (12,713,544 bytes)

Product version:
12.4.0.0

Copyright:
Copyright Adlice Software(C) 2015

Original file name:
RogueKiller

File type:
Executable application (Win64 EXE)

Language:
French (France)

Common path:
C:\users\{user}\downloads\roguekillerx64_old.exe

Digital Signature
Signed by:
Adlice

Authority:
DigiCert Inc

Valid from:
3/30/2015 5:00:00 PM

Valid to:
6/28/2018 5:00:00 AM

Subject:
CN=Adlice, O=Adlice, L=Orvault, S=Loire Atlantique, C=FR

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0730C248977813C25BB22568B51ED287

File PE Metadata
Compilation timestamp:
7/18/2016 1:26:08 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:TRB6TD6SXSTz5xh38PLFtFXn8kfVMcuGLuqiQSnbGb9bOV:WTD6muzx34LFtFXnOiLuES4KV

Entry address:
0x350F58

Entry point:
48, 83, EC, 28, E8, C3, FD, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 48, 85, C9, 74, 37, 53, 48, 83, EC, 20, 4C, 8B, C1, 48, 8B, 0D, 50, 10, 27, 00, 33, D2, FF, 15, 48, C5, 0B, 00, 85, C0, 75, 17, E8, DB, 09, 00, 00, 48, 8B, D8, FF, 15, 66, C8, 0B, 00, 8B, C8, E8, 83, 09, 00, 00, 89, 03, 48, 83, C4, 20, 5B, C3, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8B, D9, 48, 83, F9, E0, 77, 7C, BF, 01, 00, 00, 00, 48, 85, C9, 48, 0F, 45, F9, 48, 8B, 0D, F9, 0F, 27, 00, 48...
 
[+]

Entropy:
7.0314

Code size:
4 MB (4,241,408 bytes)

The file roguekillerx64_old.exe has been seen being distributed by the following 2 URLs.

http://www.adlice.com/fr/download/.../?wpdmdl=75&ind=aHR0cDovL2Rvd25sb2FkLmFkbGljZS5jb20vYXBpP2FjdGlvbj1kb3dubG9hZCZhcHA9cm9ndWVraWxsZXJ3aW4zMiZ0eXBlPXg2NA

http://www.adlice.com/download/.../?wpdmdl=59&ind=aHR0cDovL2Rvd25sb2FkLmFkbGljZS5jb20vYXBpP2FjdGlvbj1kb3dubG9hZCZhcHA9cm9ndWVraWxsZXJ3aW4zMiZ0eXBlPXg2NA

Scan roguekillerx64_old.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.