TRJSCAN.EXE

Trojan Scanner

Simply Super Software

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TrojanScanner’.
Publisher:
Simply Super Software  (signed and verified)

Product:
Trojan Scanner

Version:
6.6.5.1236

MD5:
61fc5082b27ef7a3188ab0af8305f7e8

SHA-1:
f46138cb8ea84d131d32167132f686e9223f83dc

SHA-256:
e5567a8e771e567b80fe1d62171424f110b2782e0112a41d3e4aebdf2d108651

Scanner detections:
5 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 7:36:25 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
W32/Sality.Patched
8.3.2.4

Bkav FE
HW32.Packed
1.3.0.7383

Comodo Security
Packed.Win32.MUPX.Gen
23690

F-Prot
W32/Patched.Y.gen
v6.4.7.1.166

Rising Antivirus
PE:Junk.FileBroken!1.9A81 [F]
23.00.65.161109

File size:
718.6 KB (735,824 bytes)

Product version:
6.6.5

Copyright:
Copyright © 1999-2007 Simply Super Software

Original file name:
TRJSCAN.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\trojan remover\trjscan.exe

Digital Signature
Authority:
The USERTRUST Network

Valid from:
10/6/2006 7:00:00 AM

Valid to:
10/6/2008 6:59:59 AM

Subject:
CN=Simply Super Software, O=Simply Super Software, STREET=PO Box 2849, L=Nuneaton, S=Warwickshire, PostalCode=CV10 7YX, C=GB

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00C68B43AE49A935A513E3D96D6FB9E77D

File PE Metadata
Compilation timestamp:
11/25/2007 8:33:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:26fnFoPdKCfImPxDtvQUY7IcXgaEs7fOlJxHO06vqDVIuIOXAn4/f7:BfvcxBXmua9b0MqD3z/z

Entry address:
0x2334B0

Entry point:
C3, C3, C3, C3, C3, C3, C3, C3, 00, 00, E7, FF, C7, 87, C0, 87, 1C, 00, 3F, A4, 95, 44, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46...
 
[+]

Entropy:
7.8614  (probably packed)

Code size:
652 KB (667,648 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TrojanScanner

Command:
C:\Program Files\trojan remover\trjscan.exe


Scan TRJSCAN.EXE - Powered by Reason Core Security