home

trjsetup682.exe

Trojan Remover

Simply Super Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Simply Super Software   (signed by Simply Super Software)

Product:
Trojan Remover

Description:
Trojan Remover Setup

Version:
6.8.2

MD5:
69a355da1f82c09141d1c0bf8e16ea41

SHA-1:
b47f6a418d49b97b83e86c1e26b6a4c638f18332

SHA-256:
b9752689904fea1952107d186cc20540be3bd1b769ff7f8b4cb0615bdef427fa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/6/2024 2:02:29 AM UTC  (today)

File size:
10 MB (10,496,504 bytes)

Product version:
6.8.2

Copyright:
Copyright © 1999-2010 Simply Super Software

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:
Simply Super Software

Authority:
The USERTRUST Network

Valid from:
9/24/2008 1:00:00 AM

Valid to:
9/25/2011 12:59:59 AM

Subject:
CN=Simply Super Software, O=Simply Super Software, STREET=PO Box 2849, L=Nuneaton, S=Warwickshire, PostalCode=CV10 7YX, C=GB

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
383B369491C901AE4E0C7A6955D6AB31

File PE Metadata
Compilation timestamp:
6/10/2010 3:33:52 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:QIlIgOaKyxRoEWgs2HHppvoprH9VhfwONiJUcVUUMurEy9mj7w:QIIg9TxRxWbIJpvoB9LNiJUcRbA7w

Entry address:
0x163C4

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 54, 55, 41, 00, E8, 70, 04, FF, FF, 33, C0, 55, 68, 91, 6A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 4D, 6A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, A6, EF, FF, FF, E8, B1, EA, FF, FF, 8D, 55, EC, 33, C0, E8, FB, 87, FF, FF, 8B, 55, EC, B8, A8, D6, 41, 00, E8, A6, EA, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, A8, D6, 41, 00, B2, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
85 KB (87,040 bytes)

The file trjsetup682.exe has been seen being distributed by the following 9 URLs.

http://gsf-cf.softonic.com/b47/f6a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20448&instance=softonic_br&type=PROGRAM&Expires=1484375119&Signature=VU-8JMp9Fcdw8j4UrhgSiWOBS73cbPGtB7n2b1j8NLPilYZwzZkpVMxr2f-Yf6woGUAR3lakMhq~Ivtk3z3QRrLhY8ryDJOUJGw9iW2u1WL215QClZygQm~YqSvuio59Xls6hB2k5-dlPjVP0DlajtvES3oLH7EULA0HC-gTSz8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=trjsetup682.exe

http://gsf-cf.softonic.com/b47/f6a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20448&instance=softonic_br&type=PROGRAM&Expires=1472355718&Signature=BOF9GSKrY6vNj~ejjSXz3L9EvJR9HTSwmpC6RVYRO5Fq7gL13j9qngFJBZPOmDrV3hpg2cJjrMmLo9QwOH8P5CALyAQYn9T-FhYzByORacb~nbfI9aN1Bc13iP9owpajB9TgwDNbrDfQjiPWD6xoJb-NpWvyxM7-9f84c8S8J5o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=trjsetup682.exe

http://gsf-cf.softonic.com/b47/f6a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20448&instance=softonic_br&type=PROGRAM&Expires=1472191267&Signature=hMDIDcoWbB-HtXyX7ayf88xZ7jQELh4Xu7-WYTzJkz39MEeBp5xbtMa07nFZdaery11PyokgEMcoMxl7eOhGH-5er7do4Kos2t7tPxvJBsnJKej1JEdoWj8He~ySw4lO6Rbyign5L54ceXiAHZMul7pKV5yVfoxx8IwZMYMZLO4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=trjsetup682.exe

http://gsf-cf.softonic.com/b47/f6a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20448&instance=softonic_br&type=PROGRAM&Expires=1461719669&Signature=Dw6R0FfxKu1Q9zW400HZRH2o1YvCWeQ-RfHLlvyROqgilFiamtJG50gjfI6bpewBP-SURR3y5KJ4nCirCmsvSsvM29fpwm228t9gSKQ2lqPZXbZfVFITlj9RjqAvkddku0960eQ4aGgCYa91utTp6KMBAB0sDcKSIplX75Y7BDY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=trjsetup682.exe

http://gsf-cf.softonic.com/b47/f6a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20448&instance=softonic_br&type=PROGRAM&Expires=1460280863&Signature=Jr~NJrmdCIca28Dqs0NA2Zp5p2CaT7yTdQJYv7ddqBU~sRb3B4nOGAvvyoCKtLRfJqt0YKXbEIoPPwHEuJzH8ypHGeprzExXzN21pCWhg0e0kCzOZ2Lw4x6ZPkp33SyUuRR0GhtnGCANAzli8RuEpqScb1~7E0PSifgRrE6WYeQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=trjsetup682.exe

http://gsf-cf.softonic.com/b47/f6a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20448&instance=softonic_br&type=PROGRAM&Expires=1447300371&Signature=R0SvwupTTH2pOec6H1kPgpHy2BbI6T6qgXC5ibvcvCOecLbQHLOou2KtvaZ1F2R1CrtpS4R0M95C5O-zu07d~nVYY4TfeT1RgG7iQP6goDhjow92WPH5CLMxSWzimTN4ZFwzlfk~etpwh16ccmjYUqWjRy3quftTKSE5Fr-ZDak_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=trjsetup682.exe

http://gsf-cf.softonic.com/b47/f6a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20448&instance=softonic_br&type=PROGRAM&Expires=1432162851&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=BPcR~dTo3HJu1QgG4M4YgTZ82imAU89wROcVvvrAm3Txx60rojvcg-vp6sYG0Bt8ysbghTjepp2~8z90t4Y3EK23ht0rUwilS0gvm-~k4I8alWC1t15wLoVHD2F2bGAW-UG7qEXyjWtrcOs8I-eN4ZG8BZxiaWjkD5bC2rmxdsM_&filename=trjsetup682.exe

http://gsf-cf.softonic.com/b47/f6a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=20448&instance=softonic_br&type=PROGRAM&Expires=1428299425&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NRrUZ1Ci6PfhMZaVg985i4q8cDaG2gwJV3DDw-uLIkWWAfK6wO-XoIpD19~VkxPyt9p0PQkhNDvb~v98Dg4edGZP0mgXFksomvNimAUC2kvamsHvO~tODdUgyDniSI7UgkzC7FLdyADbJtkfNTe~~Hqza0r8rC3GmmxaJh2m6LQ_&filename=trjsetup682.exe

http://dc362.4shared.com/download/.../trjsetup682.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.