TinyTaskPortable_1.77_azo.exe Stealer Keylogger Analysis
| Online Virus Checker | v.1.0.150.174 |
| DB Version: | 2023-12-04 05:01:20 |
Spy.Win32.Keylogger.ca
Keylogger is designed to secretly record keystrokes on a computer or mobile device, capturing everything a user types, including sensitive information like passwords and credit card numbers. It can be used by cybercriminals to steal personal and confidential data without the user's knowledge or consent.
| File | TinyTaskPortable_1.77_azo.exe |
| Checked | 2023-12-04 03:23:08 |
| MD5 | a1f7f94dc94673a6456d440cc38fa4f2 |
| SHA1 | cd5f215ed8a2178488f1e2bc326a5b1abc7906f2 |
| SHA256 | 75525220f3afd40984069701a30ebabf24faf2412c9083556c8c35d9abf50914 |
| SHA512 | ebc4ccca63e2f94491beaee578cd149fff9513c571d4e924e0afd787521a9ff0d1410ea65dfc7eda2268bffef0a68769b11e99b0481715b3a3ff48dafc3d22a5 |
| Imphash | 00be6e6c4f9e287672c8301b72bdabf3 |
| File Size | 461195 bytes |
Spy.Win32.Keylogger.ca Removal
Gridinsoft has the capability to identify and eliminate Spy.Win32.Keylogger.ca without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Portable Executable Info
 |
483dae323a3615860ef68938c7b19c3d cbe4c87e80d3fbed7e84ef783fe6bf56 960307d2b171554d |
| Image Base: | 0x00400000 |
| Entry Point: | 0x0041d4f9 |
| Compilation: | 2018-06-24 15:04:40 |
| Checksum: | 0x000518dd (Actual: 0x00077574) |
| OS Version: | 5.1 |
| PDB Path: | D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 6 |
| Imports: | KERNEL32, gdiplus, |
| Exports: | 0 |
| Resources: | 34 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x0002e7e4 | 0x0002e800 | 7ae56743cb1c1dd0729dabc1fbbec9d0 | 6.70 |
| .rdata | 0x00030000 | 0x00009a8c | 0x00009c00 | 7da63e6bffa0fa279d3c6eb4326c2e77 | 5.13 |
| .data | 0x0003a000 | 0x000203a0 | 0x00000c00 | 49870b8f6c92b732d5bdaabfa8a62f09 | 3.24 |
| .gfids | 0x0005b000 | 0x000000e8 | 0x00000200 | cf920c8d17007b5704457275f243772b | 2.08 |
| .rsrc | 0x0005c000 | 0x0002fc94 | 0x0002fe00 | 9795593d96e6def5a3edcd20d3c6a00b | 4.61 |
| .reloc | 0x0008c000 | 0x00001fd0 | 0x00002000 | fbe01bd488742411bc1b9dd44c08c65c | 6.68 |
