home

jrt.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.elektroda.pl and multiple other hosts.
MD5:
ee386d5acb945089bcd91766697224bb

SHA-1:
371689a5b787efc2f6bbd86532cbfbe2090bce74

SHA-256:
97086a618be93b3285958d7a5d7c1ceb80abf8d5ece9b3a162e7b78319c75c20

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:36:38 AM UTC  (today)

File size:
1012.8 KB (1,037,068 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\jrt.exe

File PE Metadata
Compilation timestamp:
7/22/2007 4:33:05 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:479WjXvA7FAhGyE5vHBWdpACfWgSNk7PVvrzNmNJMBY9Qiby9H6baFpZ4U7Cbc1y:479ZD1BWd6kpvrZeGnJCS2yvaZi4a6v

Entry address:
0x14DA6

Entry point:
55, 8B, EC, 6A, FF, 68, 48, 7C, 41, 00, 68, A0, 4D, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 28, 71, 41, 00, 59, 83, 0D, C4, C8, 41, 00, FF, 83, 0D, C8, C8, 41, 00, FF, FF, 15, 2C, 71, 41, 00, 8B, 0D, B4, C4, 41, 00, 89, 08, FF, 15, 30, 71, 41, 00, 8B, 0D, B0, C4, 41, 00, 89, 08, A1, 34, 71, 41, 00, 8B, 00, A3, C0, C8, 41, 00, E8, 1C, 01, 00, 00, 39, 1D, 00, C2, 41, 00, 75, 0C, 68, 2E, 4F, 41, 00, FF, 15, 38, 71...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
85 KB (87,040 bytes)

The file jrt.exe has been seen being distributed by the following 11 URLs.

http://www.elektroda.pl/.../download.php?id=566725

http://pcrehabva.com/JRT.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

https://drive.google.com/uc?id=0B3boHwQ1k2GMcWtUal93Mm5hdnM&export=download

https://doc-14-9s-docsviewer.googleusercontent.com/viewer/securedownload/s6abq17bobc30smelga4v0t944hedcvj/gv4kr72a1t5t180qrb1icb7g9rlrn5nu/1389906000000/ZXhwbG9yZXI=/.../MEI0UDg3LTJHdTNaU1FtTlllVVV0VEZaM1pYYw==?a=dl&filename=JRT.zip&sec=AHSqidZUH5NbyEjQgXmwgpG9jJndpnTSvJj_MKmw2Nwl3raRTMxQ9U1Nza3TbowL0JCzQh2NPa1c&rel=zip;z1;JRT.exe

https://docs.google.com/viewer/noncesigner?nonce=f5moulku5dmpq&continue=https://doc-14-9s-docsviewer.googleusercontent.com/viewer/securedownload/s6abq17bobc30smelga4v0t944hedcvj/gv4kr72a1t5t180qrb1icb7g9rlrn5nu/1389906000000/ZXhwbG9yZXI=/.../MEI0UDg3LTJHdTNaU1FtTlllVVV0VEZaM1pYYw==?sec=AHSqidZUH5NbyEjQgXmwgpG9jJndpnTSvJj_MKmw2Nwl3raRTMxQ9U1Nza3TbowL0JCzQh2NPa1c&a=dl&filename=JRT.zip&rel=zip;z1;JRT.exe&hash=073fo8a348o17obadmueuoubij2hcbgb

https://doc-14-9s-docsviewer.googleusercontent.com/viewer/securedownload/s6abq17bobc30smelga4v0t944hedcvj/gv4kr72a1t5t180qrb1icb7g9rlrn5nu/1389906000000/ZXhwbG9yZXI=/.../MEI0UDg3LTJHdTNaU1FtTlllVVV0VEZaM1pYYw==?sec=AHSqidZUH5NbyEjQgXmwgpG9jJndpnTSvJj_MKmw2Nwl3raRTMxQ9U1Nza3TbowL0JCzQh2NPa1c&a=dl&filename=JRT.zip&rel=zip;z1;JRT.exe&nonce=f5moulku5dmpq&user=AGZ5hq-wj7RHCyjMH79pUMXcztms&hash=njci80gqgpu5ojq0bmsormj0dm41hji5

http://download.pcwelt.de/area_release/files/34/4B/.../JRT-610.exe

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/5066683/JRT.exe?__cbodl__=1390688334_30aeaacab28fd7ab2ee79497a9ddb4ee&_chksum_=ee386d5acb945089bcd91766697224bb;ct=1;thc=1;b=5066683;c=8515040;tit=Junkware Removal Tool 6.1.0;url=http://www.computerbild.de/.../Junkware-Removal-Tool-8515040.html;sep=|;tce=|;tid=36599;tn=Anti-Malware;tp=95|367;tc=95|367|36599;tpn=Software Kategorie|Sicherheit;cs=1

http://dl.cdn.chip.de/downloads/.../JRT61.exe

http://thisisudax.org/.../JRT.exe

Scan jrt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.