» grandia 2 tfile ru.exe
Overview
Analysis
File Details

grandia 2 tfile ru.exe

Proxomitron

PLANETA SOFT

The application grandia 2 tfile ru.exe by PLANETA SOFT has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

Publisher:

Groom-A-Zebu (tm) (signed by PLANETA SOFT)

Product:

Proxomitron

Description:

The Proxomitron

Version:

4, 5, 0, 4

MD5:

b473cc6544451449a165e95da73ef9b2

SHA-1:

dea001618f82e0c0b5668b8fc3407e375ca5b1ee

SHA-256:

f4eee198b88a4856e85c799b4fde86fda3ecefd2351f87ca7d33c2be346d7ee8

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

5/1/2024 2:01:10 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP (M)

17.3.12.4

File size:

617 KB (631,768 bytes)

Product version:

Naoko-4.5 2003-6-1

Trademarks:

Proxomitron, The, and the letters A-Z

Original file name:

Proxomitron.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\grandia 2 tfile ru.exe

Digital Signature

Signed by:

PLANETA SOFT

Authority:

COMODO CA Limited

Valid from:

4/8/2015 3:00:00 AM

Valid to:

4/8/2016 2:59:59 AM

Subject:

CN=PLANETA SOFT, O=PLANETA SOFT, STREET=42 ul.Ordzhonikidze, L=St. Petersburg, S=St. Petersburg region, PostalCode=196143, C=RU

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00C5748D950B5855C8F1291300CAA21E91

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

Entry address:

0x8BD38

Entry point:

9C, C7, 04, 24, 0D, EF, FD, BA, E9, 6D, 97, FF, FF, C7, 44, 24, 08, C8, 8E, 64, 2E, 68, 36, E0, 26, 30, 68, 3C, 70, C7, 68, 60, 8D, 64, 24, 30, E9, 88, 2B, 00, 00, F9, 3B, 45, F0, E8, 07, 3B, FF, FF, E8, D6, FF, FF, FF, F6, D7, E8, 2C, 55, FF, FF, E9, F8, 78, FF, FF, 5C, A2, BC, 13, 7A, 75, E5, E8, B2, EB, A0, 58, 46, 40, 18, B8, 54, 38, A8, E4, AD, 1F, B9, F6, EB, A6, EC, E0, 79, 4C, 88, 18, C6, AE, F4, 84, 52, 49, 0C, D5, 82, 54, 7A, DB, 1D, CA, 5D, A5, FC, 6E, 22, 6E, 4F, FE, 40, 05, AF, 4C, 59, E0, 9D... 
[+]

Code size:

442.5 KB (453,120 bytes)

Remove grandia 2 tfile ru.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.