» gprocessinfo.dll
Overview
Analysis
File Details
Programs (1)

gprocessinfo.dll

Processes Info

GridinSoft LLC

This is installed with Trojan Killer.

File name:

gprocessinfo.dll

Publisher:

GridinSoft LLC (signed and verified)

Product:

Processes Info

Version:

1.0.0.0

MD5:

eec0e0bc6c508290d8f26e8e92e4e9ca

SHA-1:

bec7e8a5ca912ddf871d22ea59cfc6702fc79ef1

SHA-256:

921c08494f09a818f59b25854ac8f732d0af4ea1c598587ebdecbc0d874f8043

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 11:18:55 AM UTC (today)

File size:

40.3 KB (41,280 bytes)

Product version:

1.0.0.0

Original file name:

Processes Info

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\gridinsoft trojan killer\gprocessinfo.dll

Digital Signature

Signed by:

GridinSoft LLC

Authority:

VeriSign, Inc.

Valid from:

1/13/2011 1:00:00 AM

Valid to:

1/14/2012 12:59:59 AM

Subject:

CN=GridinSoft LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=GridinSoft LLC, L=Kiev, S=Kiev, C=UA

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3342F9C793FB9687D0852BFF37D40D9F

File PE Metadata

Compilation timestamp:

8/14/2011 10:33:50 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

768:pe6VbiAmDNoGy0hEtmnTEDTEfS/vyjLRL:0GVm7TzkcjLR

Entry address:

0x15A4

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 15, 14, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 40, 9C, 00, 10, 89, 0D, 3C, 9C, 00, 10, 89, 15, 38, 9C, 00, 10, 89, 1D, 34, 9C, 00, 10, 89, 35, 30, 9C, 00, 10, 89, 3D, 2C, 9C, 00, 10, 66, 8C, 15, 58, 9C, 00, 10, 66, 8C, 0D, 4C, 9C, 00, 10, 66, 8C, 1D, 28, 9C, 00, 10, 66, 8C, 05, 24, 9C, 00, 10, 66, 8C, 25, 20, 9C, 00, 10, 66, 8C, 2D, 1C, 9C, 00, 10, 9C, 8F, 05, 50, 9C... 
[+]

Code size:

18.5 KB (18,944 bytes)

The file gprocessinfo.dll has been discovered within the following program.

Trojan Killer by Gridinsoft LLC

Publisher's description - “Developed specifically for automatic removal of viruses, bots, spyware, keyloggers, trojans, scareware and rootkits without the need to manually edit system files or registry, Trojan Killer additionally fixes system modifications that were introduced by malware and which, regretfully, are often ignored by some popular antivirus scanners.”

trojan-killer.com

3% remove it

Scan gprocessinfo.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.