» GIDD.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

GIDD.exe

GID Desktop Application

StrikeForce Technologies, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘GIDDesktop’. This is installed with PrivacyProtect.

File name:

GIDD.exe

Publisher:

StrikeForce Technologies Inc. (signed by StrikeForce Technologies, Inc.)

Product:

GID Desktop Application

Version:

3, 0, 0, 126

MD5:

c1f1aeab2ae2666bdbea060f9c72b556

SHA-1:

b1e36ab2a8d1778c2b4b03bc862a81e5f65e6a50

SHA-256:

b02373e721f6021f35a33c4b9ea2162080fc4adaf6c0330e5c3421466823b443

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 11:59:46 AM UTC (today)

File size:

381.5 KB (390,664 bytes)

Product version:

3, 0, 0, 0

Trademarks:

StrikeForceTechnologies Inc

Original file name:

GIDD.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\sft\guardedid\gidd.exe

Digital Signature

Signed by:

StrikeForce Technologies, Inc.

Authority:

GlobalSign nv-sa

Valid from:

8/7/2009 10:03:23 PM

Valid to:

8/8/2010 10:03:17 PM

Subject:

CN="StrikeForce Technologies, Inc.", O="StrikeForce Technologies, Inc.", L=Edison, S=NJ, C=US

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

01000000000122F8946C5D

File PE Metadata

Compilation timestamp:

7/8/2010 1:58:31 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:7tmqxhkTcM4b8x5mXTApDIkD2dcEFpig8F8NhsO:7tmqxhbM4brMdIkadcEFpF8Fq/

Entry address:

0x2ADCC

Entry point:

E8, DD, 79, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E9, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, BE, 46, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 68, 82, 45, 00, 74, 12, 8B, 0D, 84, 81, 45, 00, 85, 48, 70, 75, 07, E8, 8B, 83, 00, 00, 89... 
[+]

Entropy:

6.2197

Code size:

259 KB (265,216 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

GIDDesktop

Command:

C:\Program Files\sft\guardedid\gidd.exe \s

The file GIDD.exe has been discovered within the following program.

PrivacyProtect by StrikeForce Technologies, Inc

www.intersections.com

25% remove it

Scan GIDD.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.