File Name | setupscreenhunter 5.1 free.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.174.174 |
Database Version | 2024-05-06 17:00:45 UTC |
Malware family: Generic
Hash Type | Value | Action |
---|---|---|
MD5 |
958a6528a6ff4fa657507a1c7b6a5dec
|
|
SHA1 |
87e2d7446f687ea2be3afa1657b97ad2d99d4ba9
|
|
SHA256 |
19a6fab0b940ce5a1334a9ec80aeae1e1d585a15d9eccc5cbc75ec972edd1269
|
|
SHA512 |
568e84f9bced601dae33ea041d2df9f8d055dec482cea57cf3b81c40b5be632b3418b20a8a1b59f8e80dcf939a99cb8f85427e38256a647f32eab5f8e8498a9a
|
|
ImpHash |
e41c25ab7824b3df73334188c40518ae
|
Icon |
Hash: 89c5a2db81cfc6a1f46ad26e47c4fa7f
Fuzzy: 474083a1c68830655c519edd592b03af dHash: c9d4c4cda6a8cec6 |
Image Base | 0x00400000 |
Entry Point | 0x004021af |
Compilation Time | 2001-08-13 17:13:38 |
Checksum | 0x00000000 (Actual: 0x00487cc6) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | The PE file does not contain a certificate table. |
Imports |
4 libraries
KERNEL32, USER32, GDI32, ADVAPI32 |
Exports | 2 functions |
Resources | 3 Resources |
Sections | 4 Sections |
CompanyName | Wisdom Software Inc. |
FileDescription | www.wisdom-soft.com |
FileVersion | 5.1 Free |
LegalCopyright | (c) 2009 Wisdom Software Inc. |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
8,486 bytes | 8,704 bytes | 6.19 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
C71643C087E2557D0B1D36C694ECCCCF |
.rdata |
0x00004000 |
1,913 bytes | 2,048 bytes | 4.78 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C8CFB67D59A05AEFA27A9FECD141F5EF |
.data |
0x00005000 |
1,144 bytes | 1,024 bytes | 3.96 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
C7C41671D08E5CD17AE9B12731E3DE24 |
.rsrc |
0x00006000 |
1,600 bytes | 2,048 bytes | 2.90 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
40CE04724E1B6183240F7BE40F234CF7 |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 1 | 744 bytes | |
RT_GROUP_ICON | 1 | 20 bytes | |
RT_VERSION | 1 | 588 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Malware.Win32.Generic.cld without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system