SjD.exe is usually located in the 'c:\downloads\' folder.
Some of the anti-virus scanners at VirusTotal detected SjD.exe.
If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.
SjD.exe is not signed.
19 of the 66 anti-virus programs at VirusTotal detected the SjD.exe file. That's a 29% detection rate.
Scanner | Detection Name |
---|---|
AegisLab | Trojan.Win32.Generic.4!c |
AVG | FileRepMetagen [Malware] |
ClamAV | Win.Trojan.Sality-84133 |
CMC | Virus.Win32.Sality!O |
Cybereason | malicious.db5782 |
Cyren | W32/Threat-HLLIE-based!Maximus |
eGambit | Unsafe.AI_Score_54% |
Endgame | malicious (high confidence) |
FireEye | Generic.mg.85cc1f7260cb1089 |
Ikarus | Win32.Downloader.HHF |
Invincea | heuristic |
Jiangmin | DangerousObject.Multi.aig |
McAfee-GW-Edition | BehavesLike.Win32.BadFile.mc |
SUPERAntiSpyware | Trojan.Agent/Gen-Packed |
TheHacker | Trojan/Generik.GODLMWM |
Trapmine | malicious.high.ml.score |
VBA32 | Trojan.Tiggre |
Yandex | Trojan.IRCBot!EDAOItizJAE |
Zillya | Trojan.Genome.Win32.97783 |
The following information was gathered by executing the file inside Cuckoo Sandbox.
Successfully executed process in sandbox.
{ "file_opened": [ "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls" ], "regkey_opened": [ "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\7bbe451e74fb64f209200983518be46a14c3d0d71dd7d86eac7a774322d937b0.bin", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\OLE\\Tracing", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\", "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_CURRENT_USER\\Software\\NI-soft\\NetBig2\\Settings", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback\\Arial", "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes", "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}" ], "regkey_read": [ "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext", "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US", "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Locale\\00000409", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorSystemHeapIsPrivate", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorUseSystemHeap", "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable", "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Language Groups\\1", "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US", "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations", "HKEY_CURRENT_USER\\Software\\NI-soft\\NetBig2\\Settings\\LFONT", "HKEY_CURRENT_USER\\Software\\NI-soft\\NetBig2\\Settings\\PORTRAITID" ], "dll_loaded": [ "OLEAUT32.DLL", "comdlg32.dll", "C:\\Windows\\syswow64\\MSCTF.dll", "kernel32.dll", "UxTheme.dll", "WSOCK32.dll", "C:\\Windows\\system32\\ole32.dll", "dwmapi.dll", "comctl32", "comctl32.dll", "C:\\Windows\\system32\\uxtheme.dll" ] }
[ { "process_path": "C:\\Windows\\System32\\lsass.exe", "process_name": "lsass.exe", "pid": 476, "summary": {}, "first_seen": 1576713185.328125, "ppid": 376 }, { "process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\7bbe451e74fb64f209200983518be46a14c3d0d71dd7d86eac7a774322d937b0.bin", "process_name": "7bbe451e74fb64f209200983518be46a14c3d0d71dd7d86eac7a774322d937b0.bin", "pid": 2436, "summary": { "file_opened": [ "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls" ], "regkey_opened": [ "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\7bbe451e74fb64f209200983518be46a14c3d0d71dd7d86eac7a774322d937b0.bin", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\OLE\\Tracing", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\", "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_CURRENT_USER\\Software\\NI-soft\\NetBig2\\Settings", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback\\Arial", "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes", "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}" ], "regkey_read": [ "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext", "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US", "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Locale\\00000409", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorSystemHeapIsPrivate", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorUseSystemHeap", "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable", "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Language Groups\\1", "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US", "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey", "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations", "HKEY_CURRENT_USER\\Software\\NI-soft\\NetBig2\\Settings\\LFONT", "HKEY_CURRENT_USER\\Software\\NI-soft\\NetBig2\\Settings\\PORTRAITID" ], "dll_loaded": [ "OLEAUT32.DLL", "comdlg32.dll", "C:\\Windows\\syswow64\\MSCTF.dll", "kernel32.dll", "UxTheme.dll", "WSOCK32.dll", "C:\\Windows\\system32\\ole32.dll", "dwmapi.dll", "comctl32", "comctl32.dll", "C:\\Windows\\system32\\uxtheme.dll" ] }, "first_seen": 1576713185.59375, "ppid": 2736 } ]
[ { "markcount": 1, "families": [], "description": "Checks if process is being debugged by a debugger", "severity": 1, "marks": [ { "call": { "category": "system", "status": 0, "stacktrace": [], "last_error": 0, "nt_status": -1073741816, "api": "IsDebuggerPresent", "return_value": 0, "arguments": {}, "time": 1576713185.71875, "tid": 2124, "flags": {} }, "pid": 2436, "type": "call", "cid": 193 } ], "references": [], "name": "checks_debugger" }, { "markcount": 1, "families": [], "description": "The executable contains unknown PE section names indicative of a packer (could be a false positive)", "severity": 1, "marks": [ { "category": "section", "ioc": "PEPACK!!", "type": "ioc", "description": null } ], "references": [], "name": "pe_features" }, { "markcount": 1, "families": [], "description": "The executable uses a known packer", "severity": 1, "marks": [ { "category": "packer", "ioc": "PE-PACK 0.99", "type": "ioc", "description": null } ], "references": [], "name": "peid_packer" }, { "markcount": 104, "families": [], "description": "Foreign language identified in PE resource", "severity": 2, "marks": [ { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" }, { "name": "RT_BITMAP", "language": "LANG_CHINESE", "offset": "0x00048570", "filetype": "empty", "sublanguage": "SUBLANG_CHINESE_TRADITIONAL", "type": "generic", "size": "0x00000238" } ], "references": [], "name": "origin_langid" }, { "markcount": 5, "families": [], "description": "The binary likely contains encrypted or compressed data indicative of a packer", "severity": 2, "marks": [ { "entropy": 7.906034835008026, "section": { "size_of_data": "0x00008c00", "virtual_address": "0x00001000", "entropy": 7.906034835008026, "name": ".text", "virtual_size": "0x00010000" }, "type": "generic", "description": "A section with a high entropy has been found" }, { "entropy": 7.441217877825511, "section": { "size_of_data": "0x00000a00", "virtual_address": "0x00012000", "entropy": 7.441217877825511, "name": ".data", "virtual_size": "0x00006000" }, "type": "generic", "description": "A section with a high entropy has been found" }, { "entropy": 7.589859878174594, "section": { "size_of_data": "0x00000600", "virtual_address": "0x00018000", "entropy": 7.589859878174594, "name": ".idata", "virtual_size": "0x00001000" }, "type": "generic", "description": "A section with a high entropy has been found" }, { "entropy": 7.575001736966364, "section": { "size_of_data": "0x0000b000", "virtual_address": "0x00019000", "entropy": 7.575001736966364, "name": ".rsrc", "virtual_size": "0x00030000" }, "type": "generic", "description": "A section with a high entropy has been found" }, { "entropy": 0.9540229885057471, "type": "generic", "description": "Overall entropy of this PE file is high" } ], "references": [ "http:\/\/www.forensickb.com\/2013\/03\/file-entropy-explained.html", "http:\/\/virii.es\/U\/Using%20Entropy%20Analysis%20to%20Find%20Encrypted%20and%20Packed%20Malware.pdf" ], "name": "packer_entropy" } ]
The Yara rules did not detect anything in the file.
{ "tls": [], "udp": [ { "src": "192.168.56.101", "dst": "192.168.56.255", "offset": 546, "time": 3.0793111324310303, "dport": 137, "sport": 137 }, { "src": "192.168.56.101", "dst": "192.168.56.255", "offset": 5226, "time": 9.07935905456543, "dport": 138, "sport": 138 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 7070, "time": 3.038619041442871, "dport": 5355, "sport": 51001 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 7398, "time": 1.019495964050293, "dport": 5355, "sport": 53595 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 7726, "time": 3.0511550903320312, "dport": 5355, "sport": 53848 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 8054, "time": 1.5200531482696533, "dport": 5355, "sport": 54255 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 8382, "time": -0.09654998779296875, "dport": 5355, "sport": 55314 }, { "src": "192.168.56.101", "dst": "239.255.255.250", "offset": 8710, "time": 1.5317621231079102, "dport": 1900, "sport": 1900 }, { "src": "192.168.56.101", "dst": "239.255.255.250", "offset": 28120, "time": 1.0404651165008545, "dport": 3702, "sport": 49152 }, { "src": "192.168.56.101", "dst": "239.255.255.250", "offset": 36504, "time": 3.1256959438323975, "dport": 1900, "sport": 53598 } ], "dns_servers": [], "http": [], "icmp": [], "smtp": [], "tcp": [], "smtp_ex": [], "mitm": [], "hosts": [], "pcap_sha256": "ebd9d614a801c25ce1080d850278178ada2bcc6447ccdd8cead68ed2615b1b04", "dns": [], "http_ex": [], "domains": [], "dead_hosts": [], "sorted_pcap_sha256": "0baf3b941227c24cc5c9fd5a26d6a701209cd660ddda4bfac859f96308637741", "irc": [], "https_ex": [] }
The instructions below shows how to remove SjD.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the SjD.exe file for removal, restart your computer and scan it again to verify that SjD.exe has been successfully removed. Here are the removal instructions in more detail:
Property | Value |
---|---|
MD5 | 85cc1f7260cb1089bd9f8eb98a6edc46 |
SHA256 | 7bbe451e74fb64f209200983518be46a14c3d0d71dd7d86eac7a774322d937b0 |
These are some of the error messages that can appear related to sjd.exe:
sjd.exe has encountered a problem and needs to close. We are sorry for the inconvenience.
sjd.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.
sjd.exe has stopped working.
End Program - sjd.exe. This program is not responding.
sjd.exe is not a valid Win32 application.
sjd.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.
To help other users, please let us know what you will do with SjD.exe:
Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.
I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.
No comments posted yet.