File Name | Auslogics.Disk.Defrag.Ultimate-4.13.0.2- diakov- 6 detection vt.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
Scanner Version | 1.0.194.174 |
Database Version | 2024-10-28 04:00:25 UTC |
Malware family: Gen
Hash Type | Value | Action |
---|---|---|
MD5 |
d0ec0371329282f16dd7d0e030ea05f5
|
|
SHA1 |
21cc140e05dc7f8932ecf0b7e0075c89495b19b3
|
|
SHA256 |
c771cbca7685a1250bc77e4944d6802f3e2cef5c2fa2845c3af3c5b32730c646
|
|
SHA512 |
271de208e64252ff20d74f8d7e0a38e8ce7bf439a28fac528925a68469f86808b2798026114fcbc74df116a2a5b5e383208b3e92bf6016595ecc73879ca342f9
|
|
ImpHash |
a5ccbfcd83fd3dfbde6360afc0b9086f
|
Icon |
Hash: 7ceed7b04fcf55cbff62313134895f42
Fuzzy: 7d991d961366c2c8e28b965b9e3ff02e dHash: c4a0b682c0c8fc38 |
Image Base | 0x00400000 |
Entry Point | 0x0040395d |
Compilation Time | 2019-06-26 07:47:16 |
Checksum | 0x00000000 (Actual: 0x00ff641e) |
OS Version | 5.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
Digital Signature | No valid SignedData structure was found. |
Imports |
7 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32 |
Exports | 0 functions |
Resources | 17 Resources |
Sections | 5 Sections |
CompanyName | diakov.net |
FileDescription | Auslogics Disk Defrag Ultimate 4.13.0.2 |
FileVersion | 4.13.0.2 |
Translation | 0x0419 0x04e3 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
28,045 bytes | 28,160 bytes | 6.53 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
328B29FE9C45AD2F92A7D68D126B6A4C |
.rdata |
0x00008000 |
6,282 bytes | 6,656 bytes | 4.86 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
703CD9173DD02AB823C07C3508344789 |
.data |
0x0000a000 |
196,156 bytes | 512 bytes | 1.63 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
CA2D2FA5BD40C088F104D1CCF862CE81 |
.ndata |
0x0003a000 |
192,512 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x00069000 |
62,184 bytes | 62,464 bytes | 1.72 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
72DE0159FA7369DA92397783531064CA |
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 10 | 58,254 bytes | |
RT_DIALOG | 4 | 1,286 bytes | |
RT_GROUP_ICON | 1 | 146 bytes | |
RT_VERSION | 1 | 448 bytes | |
RT_MANIFEST | 1 | 1,081 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Adware.Win32.Gen.bot without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system