New

• added support the March 2023 updated of Emotet
• added memory scan function using YARA

emocheck_v2.4_x64.exe
MD5 : 71497d1195f98530caddeaa064f286ff
SHA256: 006b0cd2b9c1592b69f78016108df3304de7141bf511112f234b9f18844bfc57

New

• fixed a detection pattern

emocheck_v2.3.2_x86.exe
MD5 : 8e728142e8355ead147e366535561834
SHA256: 26a04dc64e715ff4203669d41c0f7b73ff840829be83ffb684fb7cdd21aef00f

emocheck_v2.3.2_x64.exe
MD5 : 13b17035348df2ebfc662a12571c5739
SHA256: 40d689b38f0dce2d5f4eda981860a1511557f4455b65bb5bb9fd1b8395adc332

New

• fixed a detection pattern

emocheck_v2.3.1_x86.exe
MD5 : 73bb9e0fb1284d4cf5b9bb9a83769872
SHA256: 692117d3ce4355cce990bbe756eb8880687a142fa63b4ba04032b581c7c7de01

emocheck_v2.3.1_x64.exe
MD5 : 375906a6c396354d67d4fad81b78481a
SHA256: a02363b7271c76499c49fe4fe12eb65486978a036fa9375f285a1b43f89d12cd

New

• added support the May 2022 updated of Emotet

emocheck_v2.3_x86.exe
MD5 : 9a712edc1730e51f26546e54986527a7
SHA256: 57c367eb8ab708984fbae8cb7a10c6564d3762f39711aeeb3a2ed560830bf9c2

emocheck_v2.3_x64.exe
MD5 : c9771b8dced6a27bef3aed830381c05f
SHA256: 467d9e2482f195303799cd3fb7c335f4d1f40c0fdc2bbf38db94ba7fb9a81e26

New

• added support the April 2022 updated of Emotet

emocheck_v2.2_x86.exe
MD5 : bfe35c4a070609332d29ac078897e43d
SHA256: 032ac17c04ea0edea54da9a2d71014c8a06d74485841ef7b802d81b424d27bb3

emocheck_v2.2_x64.exe
MD5 : ec6ee6ff300d097c9dc9f83a796f282a
SHA256: 333cfdd8bfb1056075b3cbfd8de1624052a57b3fb05e4ea23890fce8c63dc38a

Bug fix

• Fixed a crash bug when executing with SYSTEM privileges

emocheck_v2.1.1_x86.exe
MD5 : 2092f131f615161187a4dd4446c3e654
SHA256: 46beb191a16b752a9a5bebacf73ad1677fcf1d16e8d869f646957fd1218e9ee2

emocheck_v2.1.1_x64.exe
MD5 : df7611dfe7c21b50e606c5b1442adf17
SHA256: 1307b5c1da177de1b7fa0237a05813f883e60a936783a7e298f007fa64814ce0

New

• added support the February 2022 updated of Emotet

emocheck_v2.1_x86.exe
MD5 : 512565777fd64098b031018fabf64884
SHA256: 4bf1f687e78c1547ca7fe8d157b8d718027ed241689d8a3a2233c198efef5fb5

emocheck_v2.1_x64.exe
MD5 : c866892c5b187d6ef45e1d44388edd69
SHA256: 8d701baf910408cd27b8487ba3c854b05178b431878acc2c5dba1f87e0b671b4

New

• added support the December 2020 updated of Emotet
• added support French language

emocheck_v2.0_x86.exe
MD5 : a623ec55128763ef3ee95c1ce18424dc
SHA256: 369595afdb67bd54b4d0b5010cece75d80d660d7c7caaa49fdffa2e27f0274a0

emocheck_v2.0_x64.exe
MD5 : 25bb801e219f82bad6f53d94edfc0ff6
SHA256: e830d6b7f3b82747fc565d6eb7c12cf8b82454f1f735bde3e73d6f73a5819462

New

• added support the April 2020 updated of Emotet

Update

• update code obfuscation

emocheck_v1.0_x86.exe
MD5 : 00f7612ff7e571115638206dd5b32f2c
SHA256: 544b6eb3bc04e9015ae7b4078e20a33a28c35370fb9e2c498d65e072c4c81bf3

emocheck_v1.0_x64.exe
MD5 : 59ecb58b11c6df9324043fe4d2caf210
SHA256: cb80892758754d12af2148bcffc32eae0daa02c4815415b394aff2d79e0b761b

Emotet detection tool for Windows OS

Update (March 10th, 2020)

Code signing with Microsoft Authenticode.

emocheck_x86_signed.exe
MD5 : 7b48be91855af1c1cee55c2b4aa6005d
SHA256: 4c39ef11ade2e99eaefe37b6549e96108fd19f4152a55059a9e04a7dd13ad989

emocheck_x64_signed.exe
MD5 : 4739c25603fab312ab89508920039806
SHA256: fe07c8f02ff713d3e6cfa7f515b22da2b06cde8c6598639e1cb25c3a49ad9e86

New

• added quiet mode (no console output mode)
• added JSON reporting mode
• added a option to set output directory for the report

Update

• update detection method

emocheck_x86.exe
MD5 : 89863A79D531E2730D450F2D1C99EB6C
SHA256: 5A459538DE0A5B1C270C0617191A71D23EA6C705650761EF9B7095A736AF7301

emocheck_x64.exe
MD5 : 94005A6447CA810619FF24D67EF67A93
SHA256: 65838C35D03FE36E9DBA1408E2278F8BC282B1319FEFAABEE4491B45E1254163