» GIDD.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

GIDD.exe

GID Desktop Application

StrikeForce Technologies, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘GIDDesktop’. This is installed with PrivacyProtect.

File name:

GIDD.exe

Publisher:

StrikeForce Technologies Inc. (signed by StrikeForce Technologies, Inc.)

Product:

GID Desktop Application

Version:

3, 0, 0, 183

MD5:

5dc815bd8f376363f9c196b1adbd96eb

SHA-1:

848ad7ced9d415de6d2dccc8e046d2ede9c5b9c5

SHA-256:

9b233589d2d7a0c3f22a65319825afa6f167bd7439484a53f5ad2301cb4aa5fa

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 10:30:20 PM UTC (today)

File size:

384.6 KB (393,848 bytes)

Product version:

3, 0, 0, 0

Trademarks:

StrikeForceTechnologies Inc

Original file name:

GIDD.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\sft\guardedid\gidd.exe

Digital Signature

Signed by:

StrikeForce Technologies, Inc.

Authority:

GlobalSign nv-sa

Valid from:

8/16/2011 3:37:21 PM

Valid to:

10/8/2012 11:03:16 PM

Subject:

CN="StrikeForce Technologies, Inc.", O="StrikeForce Technologies, Inc.", L=Edison, S=NJ, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11216FB609B928C2EAB09D844721074B1BB5

File PE Metadata

Compilation timestamp:

10/12/2011 10:09:05 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:paW+MxkBd5vPkL07f3NJ3PcAnUbKdCz8eaycYqTSjLhrY8:0W+MxkBd5vPlf3NJfNIPz8edcjad

Entry address:

0x2B8EC

Entry point:

E8, 87, 79, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E9, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, BE, 46, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 68, 92, 45, 00, 74, 12, 8B, 0D, 84, 91, 45, 00, 85, 48, 70, 75, 07, E8, 35, 83, 00, 00, 89... 
[+]

Entropy:

6.2195

Code size:

261.5 KB (267,776 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

GIDDesktop

Command:

C:\Program Files\sft\guardedid\gidd.exe \s

The file GIDD.exe has been discovered within the following program.

PrivacyProtect by StrikeForce Technologies, Inc

www.intersections.com

25% remove it

Scan GIDD.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.