Online Virus Checker | v.1.0.195.174 |
DB Version: | 2024-11-03 20:00:28 |
This is a generic detection name used to identify a potentially harmful or suspicious file or program that exhibits characteristics of a Trojan horse. It is malware that disguises itself as a legitimate or benign program but contains malicious code or functions.
File | MilwaukeeRivers.exe |
Checked | 2024-11-03 18:55:07 |
MD5 | e922a4d7d2c3c937231aa937b9a2ad25 |
SHA1 | b78ade0fbd78bff01d5c86079c9224d7b87f0770 |
SHA256 | bdc7b917477bb49af7a5b06e5d9ed20e08fed25944f297a6b36a50d03d8a5777 |
SHA512 | 501a15eb4c5c64f2df9f454c11951907f33a834885113e14491a6823d8e3373c09523a3eedb52952aada8071dbeec88338dbdeb02a2c4d7a8e0af48eb1dbe5f6 |
Imphash | be41bf7b8cc010b614bd36bbca606973 |
File Size | 971658 bytes |
Gridinsoft has the capability to identify and eliminate Spy.Win32.Gen.tr without requiring further user intervention.
LegalTrademarks | BlockchainServerRapid360X is a trademark of RapidServer360 EliteBlockchain Technologies Co |
ProductName | BlockchainServerRapid360X |
Translation | 0x0409 0x04b0 |
beb7f2c0a209da13bb65188b9f61f121 225522008257bf535a74b24bd0af80a4 fef0e6e6daa69680 |
|
Image Base: | 0x00400000 |
Entry Point: | 0x00403883 |
Compilation: | 2012-02-24 19:19:54 |
Checksum: | 0x000ee8c8 (Actual: 0x000ee8c8) |
OS Version: | 5.0 |
PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
Sign: | The expected hash does not match the digest in SpcInfo |
Sections: | 6 |
Imports: | KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION, |
Exports: | 0 |
Resources: | 7 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
---|---|---|---|---|---|
.text | 0x00001000 | 0x00006dae | 0x00006e00 | 00499a6f70259150109c809d6aa0e6ed | 6.51 |
.rdata | 0x00008000 | 0x00002a62 | 0x00002c00 | 07990aaa54c3bc638bb87a87f3fb13e3 | 4.39 |
.data | 0x0000b000 | 0x00067ebc | 0x00000200 | 014871d9a00f0e0c8c2a7cd25606c453 | 1.43 |
.ndata | 0x00073000 | 0x00081000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
.rsrc | 0x000f4000 | 0x00000db6 | 0x00000e00 | 89ee89fe7851f158d99c5bfbf671994b | 5.28 |
.reloc | 0x000f5000 | 0x00000f32 | 0x00001000 | 28eb16c084f743398eac7a551641079b | 5.24 |