Gridinsoft Logo
File Icon

LDPlayer9_es_1009_ld.exe Malware Gen Analysis

Updated 1 month ago
Checked by Malaware Check
LDPlayer9_es_1009_ld.exe

Technical Analysis

File Name LDPlayer9_es_1009_ld.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-03 03:00:17 UTC
⚠

Malware.Win32.Gen.tr

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
2,254,160
File Size (bytes)
2025-05-03
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
643aeb5f046f7333d7affc142506da3f
SHA1
43aef67b26c41e87e68735ea32abf3573fbc19e3
SHA256
90e140dab016597d5738facde76fc1d03ff51c1238aed7d394f28672a106ed07
SHA512
02cd194e370e920ee7f4763aa94dfefd61a7f741dc118330d3a8c6b64224575947bd3e7a6698dc35e187b5ed56e8b4c0198318ec3101b3d54bc3818b23a5ed75
ImpHash
a5ca6aca5ebef1eeb17b08ed497614c2

PE Analysis

Basic Information

▼
Icon
Hash: 599a415fd7a574e66037cf98b463ffe6
Fuzzy: 2fe91f14ee795204f060e0165ec26e43
dHash: f0cc96b2b29acaf0
Image Base 0x00400000
Entry Point 0x004f5d2d
Compilation Time 2025-04-15 06:55:58
Checksum 0x002294e4 (Actual: 0x002294e4)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path I:\build\downloader_en_vs2019_2025\downloader_en-vs2019_3\xzdownloader\bin\xzdownloader.pdb
Digital Signature OK
Imports 18 libraries
Exports 0 functions
Resources 24 Resources
Sections 5 Sections

Version Information

▼
CompanyName JUST OKAY
FileDescription JUST OKAY
FileVersion 1.0.0.6
InternalName JUST OKAY
LegalCopyright Copyright (C) 2024
OriginalFilename JUST OKAY
ProductName JUST OKAY
ProductVersion 1.0.0.6
Translation 0x0009 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,214,885 bytes 1,214,976 bytes 6.54 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ A1C15A51217600F7F20F7B28DD48A9C3
.rdata 0x0012a000 240,048 bytes 240,128 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EFD244083452D807869DB58F8018358F
.data 0x00165000 46,368 bytes 22,016 bytes 5.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EA21D56ED9A4835A550C82590168B7B5
.rsrc 0x00171000 706,896 bytes 707,072 bytes 7.85 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 81D3C980D9D9003FFE2692251940B305
.reloc 0x0021e000 58,260 bytes 58,368 bytes 6.61 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 173CBACC3713E1E02662B50E8BA0074D
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 24 (705,503 bytes)
Resource Type Count Total Size Percentage
ZIPRES 2 577,686 bytes
81.9%
RT_ICON 16 126,162 bytes
17.9%
RT_STRING 1 80 bytes
0%
RT_ACCELERATOR 1 16 bytes
0%
RT_GROUP_ICON 2 236 bytes
0%
RT_VERSION 1 672 bytes
0.1%
RT_MANIFEST 1 651 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Malware.Win32.Gen.tr Removal

Gridinsoft has the capability to identify and eliminate Malware.Win32.Gen.tr without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware