| File Name | Run.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2026-01-05 19:00:35 UTC |
Malware family: Gen
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
764a7526617782ba7daa0060b31413f7
|
|
| SHA1 |
59c68fd9675bf813888a13ee2be06a4eda53b6cb
|
|
| SHA256 |
3c19c1a66d4ea92df60ddf47bc3d7a0eafbb521ec899ef17496922b31a74c1ee
|
|
| SHA512 |
2db7f44d4f94ade173cb28868e4fb2e46784af7fb037fa6aedd9fe903e1e967211aec2499088637d1e6f88a58bdce7bcc27953923df1be745cfa6fdff7435a33
|
|
| ImpHash |
1b30fa183bfe9ff390e568cb23d331e5
|
| Icon |
Hash: dbd719ab32c34e9fce7e1651de39ec57
Fuzzy: 0a2feb248825b36367a4eefc13f0e162 dHash: 7eeceeccd6c2f2f2 |
| Image Base | 0x00400000 |
| Entry Point | 0x008c4a10 |
| Compilation Time | 2026-01-05 17:31:40 |
| Checksum | 0x00000000 (Actual: 0x00123963) |
| OS Version | 1.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
|
| Digital Signature | No valid SignedData structure was found. |
| Imports |
5 libraries
KERNEL32, crtdll, shell32, shlwapi, user32 |
| Exports | 0 functions |
| Resources | 6 Resources |
| Sections | 3 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
UPX0 |
0x00001000 |
3,915,776 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
UPX1 |
0x003bd000 |
1,085,440 bytes | 1,082,880 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
9042AF3B87A4030F3B8D250C77DC6C2F |
.rsrc |
0x004c6000 |
102,400 bytes | 100,864 bytes | 4.27 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
F5153D8E13B13AEAF5ACB7F8FF9619C0 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 5 | 99,592 bytes | |
| RT_GROUP_ICON | 1 | 76 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Malware.Win32.Gen.vl!i without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!