trojankillerinstallerst.exe

Trojan Killer Installer

Gridinsoft, LLC

Publisher:
Gridinsoft LLC  (signed by Gridinsoft, LLC)

Product:
Trojan Killer Installer

Version:
1.0.0.1

MD5:
17d2fe0099e35886917562e3f3b8f07c

SHA-1:
e6152cd1d4e403531696c24f33888ea6c2c4f0d6

SHA-256:
e99b8756609a74bbadec06e82e92ce4d10213559441f5066c4db3d1e99afaeab

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:30:41 PM UTC  (today)

File size:
3.3 MB (3,451,344 bytes)

Product version:
1.0.0.1

Copyright:
© 2015 Gridinsoft LLC. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\trojankillerinstallerst.exe

Digital Signature
Signed by:

Authority:
Symantec Corporation

Valid from:
1/8/2015 12:00:00 AM

Valid to:
2/6/2018 11:59:59 PM

Subject:
CN="Gridinsoft, LLC", O="Gridinsoft, LLC", L=Kiev, S=Kiev, C=UA

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
36E430A048545F5E36E1B55CE55F65E0

File PE Metadata
Compilation timestamp:
6/12/2015 8:58:26 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:DWhZmZQ68hbDh2qR2SkNqrBTYEcLHGwca5T23Z45:DWbm98hbDhFTYE7wcNJ45

Entry address:
0x2D13E8

Entry point:
55, 8B, EC, 83, C4, F0, B8, A8, 52, 6C, 00, E8, 80, CE, D3, FF, A1, 90, E6, 6D, 00, 8B, 00, E8, 20, B3, F0, FF, A1, 90, E6, 6D, 00, 8B, 00, B2, 01, E8, 32, D0, F0, FF, 8B, 0D, 58, E3, 6D, 00, A1, 90, E6, 6D, 00, 8B, 00, 8B, 15, C8, 23, 6C, 00, E8, 12, B3, F0, FF, A1, 90, E6, 6D, 00, 8B, 00, E8, 62, B4, F0, FF, E8, CD, 7B, D3, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6012

Developed / compiled with:
Microsoft Visual C++

Code size:
2.8 MB (2,950,144 bytes)

The file trojankillerinstallerst.exe has been seen being distributed by the following 17 URLs.

http://software-files-a.cnet.com/s/software/14/44/90/.../setup-trojankiller-cnet.exe

Scan trojankillerinstallerst.exe - Powered by Reason Core Security