The File Analysis
| Online Virus Checker | v.1.0.139.174 |
| DB Version: | 2023-09-24 01:01:57 |
Clean File
| Checked | 2023-09-23 23:55:04 |
| MD5 | 5b992e890f4ad0fe67e2248a6796290d |
| SHA1 | a120b5048dd40faaca8d0b4eefbe7fded842329e |
| SHA256 | a0ad6653c58ec4598e6416c2fca2a6e6ecd437cf48af498d881aaa0a02210a6b |
| SHA512 | cb5de7e7c33b6f211db5a7499b7dd8e0d2cd7aac20366a38136651b68e43a73e51e19aaf731c9d819c6f1592a6908431e3084779d86edd67ed473325eb58491a |
| Imphash | 2e08576bb948c85a9a22e6393bcb27a5 |
| File Size | 18142224 bytes |
Remember: This is Result of Online Virus Scanner
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Portable Executable Info
| Image Base: | 0x140000000 |
| Entry Point: | 0x141dcbd68 |
| Compilation: | 2023-09-23 02:46:18 |
| Checksum: | 0x01159ace (Actual: 0x0115805f) |
| OS Version: | 6.0 |
| PEiD: | PE32+ executable (GUI) x86-64, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 13 |
| Imports: | kernel32, IPHLPAPI, d3d9, USER32, ADVAPI32, ole32, WS2_32, NETAPI32, |
| Exports: | 0 |
| Resources: | 2 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| 0x00001000 | 0x0013c140 | 0x0008b400 | 4f0c44c2e1d1619db519cf6bdf1102be | 7.98 | |
| 0x0013e000 | 0x0006e492 | 0x00048c00 | 04c587ea1df4f5a53b41aae5066f05ae | 7.95 | |
| 0x001ad000 | 0x0001d234 | 0x00003000 | ccd8c531b40f08e7c1971b298a28f5f8 | 7.92 | |
| 0x001cb000 | 0x0000ab6c | 0x00006200 | 7b7c13418db149a698a4a29ed603a2c3 | 7.64 | |
| 0x001d6000 | 0x0000015c | 0x00000200 | 0542188dca3a1cac9a60ddfbca578f64 | 4.30 | |
| 0x001d7000 | 0x00001640 | 0x00000800 | ceead905829feeca7c7076d8f94684c5 | 7.38 | |
| 0x001d9000 | 0x00000e5c | 0x00000a00 | cea5693759c3d921e846249e4c2bae01 | 7.17 | |
| .idata | 0x001da000 | 0x00001000 | 0x00000400 | 9ac1745c8dec98e0c8c2e2e1da84a245 | 2.12 |
| .tls | 0x001db000 | 0x00001000 | 0x00000200 | f87564af5344a47833c0f8b06a5ec122 | 0.28 |
| .rsrc | 0x001dc000 | 0x00001000 | 0x00000600 | 1b0a1a5207970f02f85ee60a27cdc480 | 3.79 |
| .themida | 0x001dd000 | 0x01bee000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .boot | 0x01dcb000 | 0x0106dc00 | 0x0106dc00 | 787aaba923fc257c6224b0ae116ca02b | 7.97 |
| .reloc | 0x02e39000 | 0x00001000 | 0x00000010 | da3b57909e8cfcad2f84b88d1dded28f | 2.47 |
