Setup.exe Trojan Gen Analysis
| Online Virus Checker | v.1.0.183.174 |
| DB Version: | 2024-07-26 08:00:38 |
Trojan.Win32.Gen.vb!s8
This is a generic detection name used to identify a potentially harmful or suspicious file or program that exhibits characteristics of a Trojan horse. It is malware that disguises itself as a legitimate or benign program but contains malicious code or functions.
| File | setup.exe |
| Checked | 2024-07-26 05:50:01 |
| MD5 | 98f167b2422ed09afbb3682d3b23418c |
| SHA1 | 43bae88449d6dd2dffae3df04328504a6e422577 |
| SHA256 | 1965578865b620d71dbdffa77085fdaa81933bb50d5efcde635096488d32278f |
| SHA512 | 45e16315e5430aba12066ce647aebe27b1ee8a4e016d70880ae1cceb80cc2eaf31a8be277861ba70104a210435ecda6f58aa0658d8c625cd2ad7cac76cfe55d8 |
| Imphash | 483f0c4259a9148c34961abbda6146c1 |
| File Size | 8133038 bytes |
Trojan.Win32.Gen.vb!s8 Removal
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Gen.vb!s8 without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| Comments | This installation was built with Inno Setup. |
| CompanyName | |
| FileDescription | Age of Empires 3: CE Setup |
| FileVersion | |
| LegalCopyright | FitGirl |
| ProductName | Age of Empires 3: CE |
| ProductVersion | |
| Translation | 0x0000 0x04b0 |
Portable Executable Info
 |
30adcb5c0b2e3c35eaec2c110733c9f8 c98f96d6ffe5af8d4eb0870c1dc20826 92e0b496a6cada72 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00416478 |
| Compilation: | 2012-10-02 05:04:04 |
| Checksum: | 0x00000000 (Actual: 0x007ca14a) |
| OS Version: | 5.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 8 |
| Imports: | oleaut32, advapi32, user32, kernel32, comctl32, |
| Exports: | 0 |
| Resources: | 17 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x000143f8 | 0x00014400 | 345db2b6911addc85b53f32245f969a0 | 6.48 |
| .itext | 0x00016000 | 0x00000be8 | 0x00000c00 | 2e74d968caedeb2d71b9505530d43907 | 6.02 |
| .data | 0x00017000 | 0x00000d9c | 0x00000e00 | d5b22eff9e08edaa95f493c1a71158c0 | 2.67 |
| .bss | 0x00018000 | 0x00005750 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .idata | 0x0001e000 | 0x00000f9e | 0x00001000 | b47eaca4c149ee829de76a342b5560d5 | 4.97 |
| .tls | 0x0001f000 | 0x00000008 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rdata | 0x00020000 | 0x00000018 | 0x00000200 | 3746f5876803f8f30db5bb2deb8772ae | 0.19 |
| .rsrc | 0x00021000 | 0x0000b200 | 0x0000b200 | 0bec0fa83ff5a14f71e2987f1dd1bea4 | 4.16 |
