Insidious.exe Stealer Stealer Analysis

Stealer Stealer

Updated on 2024-02-16 (8 months ago)

Online Virus Checker	v.1.0.165.174
DB Version:	2024-02-16 21:00:11

Spy.Win32.Stealer.st!n

File	Insidious.exe
Checked	2024-02-16 20:04:04
MD5	53debbc4b11e6cd0287d99e30cf978b9
SHA1	bb62a8dad3d7bbefde079d3b7b38436e4a21810c
SHA256	d620350c7f501bbd14d968b2a953af1516113fc88db23462fb69fd2f8f34a169
SHA512	77dadb8a6df2e13f2b2546c4a411151e1189b0db055f086fb796781736e61fc95b6c1d087491c678433e6cb8a68eca5859dd6b1469e3a137f65214d75a0eac69
Imphash	f34d5f2d4577ed6d9ceec516c1f5a744
File Size	851968 bytes

Gridinsoft has the capability to identify and eliminate Spy.Win32.Stealer.st!n without requiring further user intervention.

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process.

Image Base:	0x00400000
Entry Point:	0x004d15ae
Compilation:	2079-08-19 09:10:35
Checksum:	0x00000000 (Actual: 0x000d6d95)
OS Version:	4.0
PEiD:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Sign:	The PE file does not contain a certificate table.
Sections:	3
Imports:	mscoree,
Exports:	0
Resources:	2

Name	Virtual Address	Virtual Size	Raw Size	MD5	Entropy
.text	0x00002000	0x000cf5b4	0x000cf600	5a7652807c0c0617b680cbf703d20e5e	5.66
.rsrc	0x000d2000	0x000005f8	0x00000600	057ebff0d7e6da43626714c02d173def	4.25
.reloc	0x000d4000	0x0000000c	0x00000200	e7eabd17a5493fa5ce0337fb2ddc3592	0.10