Gridinsoft Logo
File Icon

The eLoad.exe File Analysis

Updated 1 hour ago
Checked by Malware Check
eLoad.exe

Technical Analysis

File Name eLoad.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
SSDEEP Hash
24576:+fSWTTJz77267RmR7DnsOYwjB8VgLg4Za7uDwSfXlyHq2B:+fLfV77Y77sOYJgLgM6u/XlyHqw
Scanner Version 1.0.220.174
Database Version 2025-07-10 04:00:28 UTC
⚠

Suspicious File Detected

Detected by 12 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
17%
Detection Rate
2,031,256
File Size (bytes)
12/72
Engines Detected
2025-07-10
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
0353da51c95208f937b0c54bf86c641a
SHA1
ba4f0a0833ade3ea7613f1664c60fff309becd06
SHA256
930bc41cf6a3fd96dfa7b417912db1e20f00eeedade44b2207f70913b2ec9a6b
SHA512
5b549431dc4562d70208a0da3247890e44673535a489732d8c349a90f55f924dbc5a6e5a30422d8953f2355ae8f7104af6b7ed476a6ca8f79c7a696e3c3efe94
ImpHash
9cbefe68f395e67356e2a5d8d1b285c0

Security Engines with Detections (12 of 72)

Bkav
W64.AIDetectMalware Malicious
Elastic
malicious (high confidence) Malicious
Cylance
Unsafe Malicious
ESET-NOD32
a variant of WinGo/Kryptik.HX Malicious
Avast
Win64:Evo-gen [Trj] Malicious
McAfeeD
ti!930BC41CF6A3 Malicious
Ikarus
Trojan.WinGo.Rozena Malicious
Microsoft
Trojan:Win32/Phonzy.B!ml Malicious
Google
Detected Malicious
Fortinet
W64/GoKryptik.GM!tr Malicious
AVG
Win64:Evo-gen [Trj] Malicious
DeepInstinct
MALICIOUS Malicious
60 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 920bb06170598501f40053a293895d01
Fuzzy: b9da951fadf89c74b09300a3e52e09f2
dHash: 71e88c9e9696e071
Image Base 0x00400000
Entry Point 0x00459bc0
Compilation Time 1970-01-01 00:00:00
Checksum 0x001f42d2 (Actual: 0x001f42d2)
OS Version 6.1
PEiD Signatures PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 1 libraries
kernel32
Exports 0 functions
Resources 18 Resources
Sections 14 Sections

Version Information

▼
CompanyName Google LLC
CompanyWebsite http://developer.android.com
FileDescription
FileVersion 2025.1
LegalCopyright
ProductName Android Studio
ProductVersion 2025.1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 447,621 bytes 448,000 bytes 6.16 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B69A0953A02DEE094DB2D5576C9B4670
.rdata 0x0006f000 980,080 bytes 980,480 bytes 6.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3431C1063558990C67921058D3274100
.data 0x0015f000 384,616 bytes 15,872 bytes 2.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 805102FFC5514AFFE61D49A0D6AFFB2E
/4 0x001bd000 295 bytes 512 bytes 5.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 43DC7A0AE5A7067502907DB800396667
/19 0x001be000 94,986 bytes 95,232 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 6AB47239ADCFE0A1C50B23D9298D1E38
/32 0x001d6000 18,693 bytes 18,944 bytes 7.91 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 797CD57D9C2D51734121A9D9AB06E22F
/46 0x001db000 24 bytes 512 bytes 0.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 87B999FB861257D2CE3244B153DFDDD2
/65 0x001dc000 185,652 bytes 185,856 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 0BF5423D72EB23536957A37F4DD54541
/78 0x0020a000 91,493 bytes 91,648 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 30836B3260C513E8F1BCEF78B617F830
/90 0x00221000 30,204 bytes 30,208 bytes 7.78 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 8CF3CB3D2B8A5A13583E1DE745C10BD7
.idata 0x00229000 1,148 bytes 1,536 bytes 3.57 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 35750CDA99D9E7E9B11DD8B2382FDA96
.reloc 0x0022a000 7,848 bytes 8,192 bytes 5.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3A2257D7E279321E3519C91606F62777
.symtab 0x0022c000 75,358 bytes 75,776 bytes 5.06 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ AAA36AE620FFCCE9F61C0FA30FDE4220
.rsrc 0x0023f000 66,404 bytes 66,560 bytes 4.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 69BCED77125140F314FAADE47A75EB83
Entropy Analysis Alert

5 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 18 (65,372 bytes)
Resource Type Count Total Size Percentage
RT_BITMAP 1 1,638 bytes
2.5%
RT_ICON 8 60,012 bytes
91.8%
RT_DIALOG 6 1,776 bytes
2.7%
RT_GROUP_ICON 1 118 bytes
0.2%
RT_VERSION 1 620 bytes
0.9%
RT_MANIFEST 1 1,208 bytes
1.8%

Certificate Chain Analysis

▼
Certificate Information
Product Android Studio
File Version 2025.1
Signing Date 08:21 PM 06/18/2025 (21 days ago)
Verification Status The digital signature of the object did not verify.
Signers Google LLC; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #3 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #4 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68
Google LLC #5 Chain
Validity Period: 2024-04-08 00:00:00 → 2027-04-10 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B 50 CF 24 6B 26 3E FD 85 A7 29 31 51 58 F3 FF

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
12 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware