Please ensure you understand and agree with our data protection policy before using this site. Review Policy
Analyze suspicious files to detect malware and automatically share them with our team. You can compress your file into a zip archive (if needed, we use the password "infected" to extract before checking).
Checked: | 2023-09-15 10:53:38 |
MD5: | 1dc5614fdfb5fd21be9a2cacdaef1224 |
SHA1: | 4d48aa55ef25f2cbfd35bd90826dfdec6788591a |
SHA256: | 61ee0d89eb9e0a69c02f9f6a7b9a76bbed38706aca9dba2f86edbb097d6c2c6b |
SHA512: | 5fdc32d52e3c60745437f853f6c7880868aa14330906937a576d367c45401df916d3b59fa1a679244c939d6bca5088884871502c6ef5ae65675717fd4dbcdd06 |
Imphash: | c5319e076a4e8512805ca6dc9210f0f6 |
File Size: | 2234792 bytes |
Gridinsoft has the capability to identify and eliminate Spy.Win32.Keylogger.dd!c without requiring further user intervention.
AAA Certificate Services | Sectigo Limited (GB) |
Sectigo Public Code Signing Root R46 | Sectigo Limited (GB) |
Sectigo Public Code Signing CA EV R36 | Spytech Software and Design, Inc. (US) |
Verification | OK |
7d46f4a81b3d747e911a7afbe2775658 962c4e009b0a51701b23c5adbf2f2298 c1dcdccda6a8cec6 |
|
Image Base: | 0x00400000 |
Entry Point: | 0x0040646b |
Compilation: | 2003-03-10 17:22:47 |
Checksum: | 0x0022729e (Actual: 0x0022729e) |
OS Version: | 4.0 |
PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
Sign: | OK |
Sections: | 5 |
Imports: | KERNEL32, USER32, ADVAPI32, |
Exports: | 0 |
Resources: | 3 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
---|---|---|---|---|---|
.text | 0x00001000 | 0x0000b0f5 | 0x0000c000 | 1656b44931eb2e13b018a4eb727da98e | 6.38 |
.rdata | 0x0000d000 | 0x00000d0e | 0x00001000 | 778ab8265abbd2e84ea6dafe2852d993 | 4.72 |
.data | 0x0000e000 | 0x000019ac | 0x00001000 | 19b23e399c9023f5a9e48e87e0de5f55 | 4.25 |
.rsrc | 0x00010000 | 0x000004e8 | 0x00001000 | 091ae3ec15787ac5ba25fed3fd2772ef | 1.35 |
_mvdata | 0x00011000 | 0x0020f000 | 0x0020f000 | 2ea185f12c6eb665e530bf6f5e20e613 | 8.00 |