| File Name | Precise - Temporary.exe |
| File Type |
PE32+ executable (console) x86-64, for MS Windows
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2025-12-27 23:00:36 UTC |
Malware family: Kryptik
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
f1b4baaf7e907653ee3f80a63b7ddafd
|
|
| SHA1 |
dc0c9a4c27685afce40df2046bdab9df2c96e9b9
|
|
| SHA256 |
b550ccf841b235c5bbd59522d2f132ef32c864a6d61166dde1b30e38cc073c5e
|
|
| SHA512 |
1b72faa73cc00756ae6b2fdc599c93100e8bdf10efa06f7d5e982079a0af9ec844c1e6ba6c7cfbeeb0501ce776fb433bb2025b3e34654105449069979b3146ef
|
|
| ImpHash |
14eb724d84091d3a462bb76bd4706d42
|
| Image Base | 0x140000000 |
| Entry Point | 0x1400aa500 |
| Compilation Time | 2025-08-28 21:13:00 |
| Checksum | 0x00000000 (Actual: 0x000f2d49) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32+ executable (console) x86-64, for MS Windows
|
| Digital Signature | No valid SignedData structure was found. |
| Imports | 23 libraries |
| Exports | 0 functions |
| Resources | 1 Resources |
| Sections | 6 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
704,440 bytes | 704,512 bytes | 6.50 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
57891E7CFFFCEE86D937DE5947EA5AFB |
.rdata |
0x000ad000 |
200,732 bytes | 201,216 bytes | 6.35 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
41D23DFD11F58AB7C662E44A16475179 |
.data |
0x000df000 |
9,176 bytes | 6,144 bytes | 5.05 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D5C42785FE924359D33A2556B1A3A398 |
.pdata |
0x000e2000 |
29,412 bytes | 29,696 bytes | 5.86 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
FEF2E40846562361A890437ECA2E154B |
.rsrc |
0x000ea000 |
488 bytes | 512 bytes | 4.77 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E9F115B7A129575544AD9E589233EBA2 |
.reloc |
0x000eb000 |
2,592 bytes | 3,072 bytes | 5.01 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
5624EC852A5117A8350B2B6F65E7CC53 |
1 section(s) with elevated entropy (≥6.5) - possible compression
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_MANIFEST | 1 | 392 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Trojan.Win64.Kryptik.sa without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!