v1.2.7366

EmoKill -> Avoid wasting time after detection of Emotet !!!

Changes v1.2.7366

• (Bugfix) Windows Service could not be installed/uninstalled.

Changes v1.2.7365

• (Additional) Json-files may now be stored on a fileshare.
• (Additional) Configuration file for customizing to individual needs.
• (Additional) Emotet service detection based on SOPHOS knowledge base article.

Changes v1.1.7351

• (Additional) Json-files will now be created, for details please have a look at README.
• (Improvement) Registry will be scanned for all users not only for the current user.
• (Bugfix) EmoKill will no run as 64-bit process at 64-bit systems.

Hashes

EmoKill.exe
MD5 : 1F4EA49DE80CC73F1952796C66F28079
SHA1 : C6FAFCEA551D00CD2C80255E29EBD6537804C41D
SHA256: 638DA5B8A5D32E60692C591EA9ADD76EB12E548D9CAD60562EF905DC5DA37A8C

EmoKillConsole.exe
MD5 : E552E69C4B503CF0FCA5C820D553E30C
SHA1 : 745356C30446ED5046214628916AE826FC5E54B9
SHA256: 1AD67FE3D9B06BFE840CA39790C134C3D65BD1E33C8C4D923C3CD71D0F607396

EmoKillTest.exe
MD5 : CA25ABBAB8FABB04F7C272F0DF84A0C0
SHA1 : ACA16B8A178B3765B36879CD55BE560A8B44CEED
SHA256: 87ABECDBF064D69959D80821D7121FF4EC369B7A924F58F6CE291F366A6E19C4

Newtonsoft.Json.dll
MD5 : 6815034209687816D8CF401877EC8133
SHA1 : 1248142EB45EED3BEB0D9A2D3B8BED5FE2569B10
SHA256: 7F912B28A07C226E0BE3ACFB2F57F050538ABA0100FA1F0BF2C39F1A1F1DA814

v1.2.7365

EmoKill -> Avoid wasting time after detection of Emotet !!!

Changes

• (Additional) Json-files may now be stored on a fileshare.
• (Additional) Configuration file for customizing to individual needs.
• (Additional) Emotet service detection based on SOPHOS knowledge base article.

Hashes

EmoKill.exe
MD5 : 1F4EA49DE80CC73F1952796C66F28079
SHA1 : C6FAFCEA551D00CD2C80255E29EBD6537804C41D
SHA256: 638DA5B8A5D32E60692C591EA9ADD76EB12E548D9CAD60562EF905DC5DA37A8C

EmoKillConsole.exe
MD5 : E552E69C4B503CF0FCA5C820D553E30C
SHA1 : 745356C30446ED5046214628916AE826FC5E54B9
SHA256: 1AD67FE3D9B06BFE840CA39790C134C3D65BD1E33C8C4D923C3CD71D0F607396

EmoKillTest.exe
MD5 : CA25ABBAB8FABB04F7C272F0DF84A0C0
SHA1 : ACA16B8A178B3765B36879CD55BE560A8B44CEED
SHA256: 87ABECDBF064D69959D80821D7121FF4EC369B7A924F58F6CE291F366A6E19C4

Newtonsoft.Json.dll
MD5 : 6815034209687816D8CF401877EC8133
SHA1 : 1248142EB45EED3BEB0D9A2D3B8BED5FE2569B10
SHA256: 7F912B28A07C226E0BE3ACFB2F57F050538ABA0100FA1F0BF2C39F1A1F1DA814

v1.1.7351.15211

EmoKill -> Avoid wasting time after detection of Emotet !!!

Changes

• (Additional) Json-files will now be created, for details please have a look at README.
• (Improvement) Registry will be scanned for all users not only for the current user.
• (Bugfix) EmoKill will no run as 64-bit process at 64-bit systems.

Hashes

EmoKill.exe
MD5 : E8773321860E3273D1F76DCFD111FE83
SHA1 : 0AE2F58F23DE09A319FC379B4D23962CBA1ACCDA
SHA256: 6A8B98B9A0FE2B7CC2C97A0276100AA356B848319A60500E1077B909C2803BB3

EmoKillConsole.exe
MD5 : B9C9179100FF545CA20807CDAD4CA405
SHA1 : 2A7F5112BF1E55FD0500C78659AD2859845EAD7A
SHA256: 172CD5044950DD844EAAB1C5B9170633675CA2CBCCFE1652197AF0D297DC9BE3

EmoKillTest.exe
MD5 : 98C40B96BE7B292BD9A112E6B90D1E3C
SHA1 : BF3F5F98C75E6C01F27BEDC8AE367A4BF9D396AB
SHA256: 4FF5577B87FFDB1C817D3B3864A522DC33C6E911BC34B9794BAC0CB9DCA437B7

Newtonsoft.Json.dll
MD5 : 6815034209687816D8CF401877EC8133
SHA1 : 1248142EB45EED3BEB0D9A2D3B8BED5FE2569B10
SHA256: 7F912B28A07C226E0BE3ACFB2F57F050538ABA0100FA1F0BF2C39F1A1F1DA814

v1.0.7348.26967

EmoKill -> Avoid wasting time after detection of Emotet !!!

EmoKill.exe
MD5 : 07261DAA0D7673F7F65D422E3944224E
SHA1 : 5F58AFD7A7EC9877576232ACFAEC058A46843878
SHA256: 86B13205DF5AF154E99631C728CCD7C4B6846DE7737CE7B471FAAC3DD7C06E79

EmoKillConsole.exe
MD5 : E652FA0AB3782CCF58D595BAEB075B9F
SHA1 : 9068315EBC395EBE676675716DB7259609AE281A
SHA256: 72E4B52B8DCC62C393659B6B5909E357E7B9E2F6F512EA78B64DAB76776F42E2

EmoKillTest.exe
MD5 : EDFD65A922B324CB824C587EF5711638
SHA1 : 3EC7D9D8027DAF825DC71F3B0471126AB13E0474
SHA256: 7D28FB9FBF664390EB992F817E63D256F71C0ECC22D71C836F6B8D4B03D9CBF7