Tinytask.exe Stealer Keylogger Analysis
| Online Virus Checker | v.1.0.175.174 |
| DB Version: | 2024-05-07 21:00:29 |
Spy.Win32.Keylogger.ca
Keylogger is designed to secretly record keystrokes on a computer or mobile device, capturing everything a user types, including sensitive information like passwords and credit card numbers. It can be used by cybercriminals to steal personal and confidential data without the user's knowledge or consent.
| File | tinytask.exe |
| Checked | 2024-05-07 21:31:50 |
| MD5 | 8fd3551654f0f5281ddbd7e32cb73054 |
| SHA1 | 9b1c9722847cd57cd11e4de80cd9e8197c3c34cd |
| SHA256 | 75e06ac5b7c1adb01ab994633466685e3dcef31d635eba1734fe16c7893ffe12 |
| SHA512 | a716f535e363fc1225b1665e1c24693e768d13699ea37bdf57effe4fea24b4b30a2181174f66c35e749b9c845b07f82eecbf282ee5972de0426f847293d46b4b |
| Imphash | 2eaf43a49d1a8bff951d9247e6d730d9 |
| File Size | 36352 bytes |
Spy.Win32.Keylogger.ca Removal
Gridinsoft has the capability to identify and eliminate Spy.Win32.Keylogger.ca without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| Comments | www.tinytask.net |
| CompanyName | |
| FileDescription | www.tinytask.net |
| FileVersion | 1, 77, 0, 0 |
| InternalName | |
| LegalCopyright | Copyright (c) 2019. All Rights Reserved. |
| LegalTrademarks | |
| OriginalFilename | TinyTask.exe |
| PrivateBuild | |
| ProductName | TinyTask |
| ProductVersion | 1, 77, 0, 0 |
| SpecialBuild | |
| Translation | 0x0409 0x04b0 |
Portable Executable Info
 |
9886748bb43052190f7527a29ade0e45 197930a697f960918d87c2a57fb7fec0 b28e96968ce8b2a2 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00404680 |
| Compilation: | 2019-11-04 10:40:02 |
| Checksum: | 0x0000e4d0 (Actual: 0x0000e4d0) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 4 |
| Imports: | KERNEL32, USER32, GDI32, comdlg32, SHELL32, |
| Exports: | 0 |
| Resources: | 7 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00003784 | 0x00003800 | 82d0259f80eba06b4f8e6aa631b07142 | 6.38 |
| .rdata | 0x00005000 | 0x00000bc8 | 0x00000c00 | 7fe51fa84f034fbcd00931d857f619be | 5.10 |
| .data | 0x00006000 | 0x00000ffc | 0x00000a00 | aee52c249396991482a7d9fd66419b22 | 4.80 |
| .rsrc | 0x00007000 | 0x00003de0 | 0x00003e00 | 33ab394b2cf6f8876c748d897a9ce89d | 6.40 |
