home

GirafficTray.exe

GIRAFFIC TECHNOLOGIES LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Giraffic Video Accelerator’.
Publisher:
Giraffic  (signed by GIRAFFIC TECHNOLOGIES LTD)

Product:
Giraffic

Description:
Giraffic Video Accelerator Tray Icon

Version:
0, 85, 672, 230

MD5:
ddd84ecfa35bdb99502a5054cdf60f2f

SHA-1:
dc1663b63796165ebf25b43902a5001b5a9c5312

SHA-256:
af7796f18bb170fdcb757740c41c7d48005b158a8ffccdb982b63d33b1ece7f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 12:21:54 PM UTC  (today)

File size:
518.1 KB (530,584 bytes)

Product version:
0, 85, 672, 230

Copyright:
Copyright (C) 2009

Original file name:
GirafficTray.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\giraffic\giraffictray.exe

Digital Signature
Signed by:
GIRAFFIC TECHNOLOGIES LTD

Authority:
Thawte, Inc.

Valid from:
10/7/2010 9:00:00 AM

Valid to:
9/24/2011 8:59:59 AM

Subject:
CN=GIRAFFIC TECHNOLOGIES LTD, O=GIRAFFIC TECHNOLOGIES LTD, L=Tel Aviv, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2F2FFFF5770FD91BAECAD9660B3B5499

File PE Metadata
Compilation timestamp:
12/1/2010 1:00:10 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:h1MOTOIKm9LhgrOr2TeO9tg8RlVP5sqOVMEt1ZZWCRqn6ZYdA/:6ztgUhsq0MErZZWCR+6ZYdA

Entry address:
0x32C71

Entry point:
E8, A9, 9C, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, CC, CC, 8B, 44, 24, 0C, 53, 85, C0, 74, 52, 8B, 54, 24, 08, 33, DB, 8A, 5C, 24, 0C, F7, C2, 03, 00, 00, 00, 74, 16, 8A, 0A, 83, C2, 01, 32, CB, 74, 72, 83, E8, 01, 74, 32, F7, C2, 03, 00, 00, 00, 75, EA, 83, E8, 04, 72, 12, 57, 8B, FB, C1, E3, 08, 03, DF, 8B, FB, C1, E3, 10, 03, DF, EB, 1B, 5F, 83, C0, 04, 74, 0E, 8A, 0A, 83, C2, 01, 32, CB, 74, 40, 83, E8, 01, 75, F2, 5B, C3, 83, E8, 04, 72, E5, 8B, 0A, 33, CB, BF, FF, FE, FE, 7E, 03, F9, 83, F1, FF, 33...
 
[+]

Entropy:
6.4902

Code size:
338 KB (346,112 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Giraffic Video Accelerator

Command:
C:\Program Files\giraffic\giraffictray.exe


Scan GirafficTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.