home

referral.exe

SolicitorLink

TrigoldCrystal

Publisher:
Trigold  (signed by TrigoldCrystal)

Product:
SolicitorLink

Version:
10.01.0011

MD5:
ece7f1aaa36b45e547a1bcf75a581451

SHA-1:
8ae13e2de12a16299a5958b7e9fab5ad71c4ce91

SHA-256:
0a0c123405349c9de3df28ca02ca0a3359e426feaee22b51315df2b8e1b320d2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:49:55 PM UTC  (today)

File size:
1.6 MB (1,627,648 bytes)

Product version:
10.01.0011

Original file name:
referral.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\trigoldcrystal\prospector\referral.exe

Digital Signature
Signed by:
TrigoldCrystal

Authority:
Thawte, Inc.

Valid from:
8/9/2013 1:00:00 AM

Valid to:
8/6/2014 12:59:59 AM

Subject:
CN=TrigoldCrystal, O=TrigoldCrystal, L=Bromsgrove, S=Worcestershire, C=GB

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
53D5956C29788305FB4292013B19CDA5

File PE Metadata
Compilation timestamp:
5/20/2014 2:30:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:Ls90000000000000000000000000N9q90000000000000000000000000N9w9007:1lrpTIZ

Entry address:
0x13C0

Entry point:
68, 90, 14, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, E4, 86, 5A, 79, B2, 34, 05, 43, 88, 62, 2A, 47, CA, 9D, A0, 42, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 53, 6F, 6C, 69, 63, 69, 74, 6F, 72, 4C, 69, 6E, 6B, 00, 00, 00, 00, 00, 00, 00, 01, 00, 0D, 00, 2C, D0, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, F0, D2, 40, 00, 58, 41, 54, 00, 0A, 00, 00, 00, 5C, 14, 40, 00, 05, 00, 20, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6425

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
1.3 MB (1,323,008 bytes)

Scan referral.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.