home

pricemeterd.exe

TODO:

PriceMeter

The application pricemeterd.exe by PriceMeter has been detected as adware by 11 anti-malware scanners. It is also typically executed from the user's temporary directory.
Publisher:
PriceMeter  (signed and verified)

Product:
TODO: <Product name>

Description:
PriceMeter

Version:
1.0.6.7

MD5:
d7dea757375fca8905f35128eaa6fae3

SHA-1:
afaaace72fdec210b0efa910e1e0b80e4e5da57d

SHA-256:
a13a0c442c63ae63919eb4a32cc2b1cce68f544093f4107fd2868c17e65bbc24

Scanner detections:
11 / 68

Status:
Adware

Analysis date:
4/20/2024 3:10:48 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Trash.Gen
7.11.30.172

AVG
MalSign.Primet
2017.0.2840

Baidu Antivirus
Adware.Win32.DealPly
4.0.3.1628

ESET NOD32
Win32/DealPly (variant)
10.9878

G Data
Win32.Application.Dealply
16.2.24

Malwarebytes
PUP.Optional.PriceMeter.A
v2016.02.08.05

Reason Heuristics
PUP.installCore (M)
16.2.8.5

Sophos
PriceMeter
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Nullo[Short]
9337

Trend Micro House Call
TROJ_GEN.F47V0502
7.2.39

VIPRE Antivirus
Backdoor.Win32.Bifrose.fsi
32208

File size:
361.5 KB (370,184 bytes)

Product version:
1.0.6.7

Copyright:
Copyright (C) 2014

Original file name:
pricemeterw.exe

File type:
Executable application (Win32 EXE)

Language:
English

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\files\pricemeterd.exe

Digital Signature
Signed by:
PriceMeter

Authority:
COMODO CA Limited

Valid from:
1/12/2014 10:00:00 PM

Valid to:
1/13/2015 9:59:59 PM

Subject:
CN=PriceMeter, O=PriceMeter, STREET=63 Rotchild Blvd, L=Tel Aviv, S=Tel Aviv, PostalCode=65785, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
3BC5844507FA9A5E38487A5D679A8EB9

File PE Metadata
Compilation timestamp:
4/1/2014 4:53:24 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:bTn8QKidEsRTb2ylcqU5UNC8JmTeEZXRki4eJN0AN59:bTn8QKgEsZDlc35sQTeEZXRki4erP59

Entry address:
0x1DAA3

Entry point:
E8, 35, C6, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, 83, EC, 14, 53, 56, 33, DB, 57, 8B, 7D, 08, 89, 5D, F8, 89, 5D, F4, 89, 5D, FC, 85, FF, 75, 16, E8, CF, 2F, 00, 00, 6A, 16, 5E, 89, 30, E8, B9, 5F, 00, 00, 8B, C6, 5F, 5E, 5B, C9, C3, 6A, 24, 68, FF, 00, 00, 00, 57, E8, D5, 36, 00, 00, 8B, 75, 0C, 83, C4, 0C, 85, F6, 74, D3, 39, 5E, 04, 7F, 12, 7C, 04, 39, 1E, 73, 0C, E8, 97, 2F, 00, 00, 6A, 16, 5E, 89, 30, EB, CB, 6A, 07, 58, 39, 46, 04, 7C, 0A, 7F, EA, 81, 3E, FF, 6F, 40, 93, 77, E2, E8, AE, C9, 00, 00...
 
[+]

Code size:
229.5 KB (235,008 bytes)

Remove pricemeterd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.