home

PingMonitor.exe

PingMonitor

Anatoliy Dobrynin

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘PingAssistMonitor’.
Publisher:
Anatoliy Dobrynin  (signed and verified)

Product:
PingMonitor

Version:
1.0.0.0

MD5:
a4f59e3ac265b218fa8100666dbc7b60

SHA-1:
8784033e8e45266f63e6f87cea338bf0f0319249

SHA-256:
28f28529d792d223adff5ea4bd2e8ad5117e09e6c20014993109a14f66e3397c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 8:17:21 PM UTC  (today)

File size:
2.6 MB (2,765,256 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2009 Zaz Software

Original file name:
PingMonitor.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\ping assist\pingmonitor.exe

Digital Signature
Signed by:
Anatoliy Dobrynin

Authority:
COMODO CA Limited

Valid from:
6/10/2011 2:00:00 AM

Valid to:
6/10/2013 1:59:59 AM

Subject:
CN=Anatoliy Dobrynin, O=Anatoliy Dobrynin, STREET="Krasnyj tekstil'wik, 10-23", L=Serpuhov, S=Moskovskaya oblast, PostalCode=142201, C=RU

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DA337025FD85BDEBAC7CC52BF9D4D78D

File PE Metadata
Compilation timestamp:
1/27/2013 11:37:53 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:SJej0TzzlfQlGmVqNdq7n8PJYh8PJYy0PJYT:bn8PJYh8PJYy0PJYT

Entry address:
0x2772FE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.5 MB (2,577,408 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PingAssistMonitor

Command:
C:\Program Files\ping assist\pingmonitor.exe \hide


Scan PingMonitor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.