home

TRJSCAN.EXE

Trojan Scanner

Simply Super Software

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TrojanScanner’.
Publisher:
Simply Super Software  (signed and verified)

Product:
Trojan Scanner

Version:
6.5.3.1172

MD5:
11b76aa618853bd02f4e8db2ab564480

SHA-1:
33353243091655fd8a1e20a7668b5d3a39df2eeb

SHA-256:
e2aa0023000d0a9f55aba998ceb077c763ab0b568bf33bbd6e65c0ff8ab2b41d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 3:23:21 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Win32.Generic.11E49169!300192105
23.00.65.16212

File size:
246.6 KB (252,512 bytes)

Product version:
6.5.3

Copyright:
Copyright © 1999-2006 Simply Super Software

Original file name:
TRJSCAN.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\trojan remover\trjscan.exe

Digital Signature
Signed by:
Simply Super Software

Authority:
The USERTRUST Network

Valid from:
10/6/2006 1:00:00 AM

Valid to:
10/6/2008 12:59:59 AM

Subject:
CN=Simply Super Software, O=Simply Super Software, STREET=PO Box 2849, L=Nuneaton, S=Warwickshire, PostalCode=CV10 7YX, C=GB

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00C68B43AE49A935A513E3D96D6FB9E77D

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:vQJLpySxvNMZMos4F/JI7iKUwDKY+b2bEs9l0JBpt:vJYJUsUwDKYVL9l0rp

Entry address:
0xCF290

Entry point:
60, BE, 00, 50, 49, 00, 8D, BE, 00, C0, F6, FF, C7, 87, C4, 20, 0A, 00, 20, B8, 4D, 66, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46...
 
[+]

Entropy:
7.8640

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
236 KB (241,664 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TrojanScanner

Command:
C:\Program Files\trojan remover\trjscan.exe


Scan TRJSCAN.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.