| Online Virus Checker | v.1.0.215.174 |
| DB Version: | 2025-04-30 09:00:22 |
This is a generic detection name used to identify a potentially harmful or suspicious file or program that exhibits characteristics of a Trojan horse. It is malware that disguises itself as a legitimate or benign program but contains malicious code or functions.
| Checked | 2025-04-30 06:38:12 |
| MD5 | a2c3e8f94c7ba587957096be6913cd2d |
| SHA1 | 67fd7ac6d873569fee947343fe0da2f51cf1b43c |
| SHA256 | 705cd2f684f92dc22d7e7273b958c791abb34acc0687eadf942e17ead92d8aed |
| SHA512 | 12336f76bc5adca9142c79e5c49a001643bb2acab74cb113377dab426eed7bf664dee28db74b2268097b388ec08eb8b7aafa36e56d50bffe322d399407a29131 |
| Imphash | bf95d1fc1d10de18b32654b123ad5e1f |
| File Size | 8400664 bytes |
Gridinsoft has the capability to identify and eliminate Spy.Win32.Gen.tr without requiring further user intervention.
 |
0c4eed73b8d9165b112f9f2e3859e53a f30fa0c65c237ab5aa6887188e804855 0000383838380008 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x004033e9 |
| Compilation: | 2010-04-10 12:19:23 |
| Checksum: | 0x00000000 (Actual: 0x008094c4) |
| OS Version: | 5.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive |
| Sign: | The expected hash does not match the digest in SpcInfo |
| Sections: | 5 |
| Imports: | KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION, |
| Exports: | 0 |
| Resources: | 10 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00006240 | 0x00006400 | 1a752074fcd11165f6f148ea63ebe068 | 6.42 |
| .rdata | 0x00008000 | 0x000018ca | 0x00001a00 | 7eb0899a4b6211f8bc545228417d92ad | 4.88 |
| .data | 0x0000a000 | 0x0006667c | 0x00000200 | b0b1d7c362f8cc76541b7fce5014e602 | 1.36 |
| .ndata | 0x00071000 | 0x00081000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rsrc | 0x000f2000 | 0x00003818 | 0x00003a00 | d83916849933e68c268881aa995b3c42 | 5.66 |
