Gridinsoft Logo
File Icon

The Galaxy Swapper v2 (2).exe (Galaxy Swapper v2) File Analysis

Updated 10 months ago
Checked by Malware Check
Galaxy Swapper v2 (2).exe

Technical Analysis

File Name Galaxy Swapper v2 (2).exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64, for MS Windows
SSDEEP Hash
196608:H7oHcphG8nxS3JYw2affH9faNOb6pe2BZiHhWWiVbMOVvu8ovcLFwiv:0YG8mxyNMGicWiVbMOVvuxvcL+iv
Scanner Version 1.0.183.174
Database Version 2024-07-28 01:00:16 UTC
⚠

Suspicious File Detected

Detected by 19 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
25%
Detection Rate
12,417,787
File Size (bytes)
19/75
Engines Detected
2024-07-28
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
8225468b722e6be4cc42fd850fa9e0aa
SHA1
0ece38a71bb450e48b11129de1883469d869ab24
SHA256
e846258302d7698682ceccf8b61a744f649bb1ec8d50651d762fac576b799a7a
SHA512
cdb70eadd6c69b57f05886c0b79e70853cfbcb5a5020105492185eb4cd350cad76b5224da77aac30a6dc17ffa561117ef5559d0b8ee1b97bef1b4a11f842743e
ImpHash
90d2464c05751e0163b327ef7e8a4518

Security Engines with Detections (19 of 75)

Bkav
W32.Common.B226518B Malicious
MicroWorld-eScan
Trojan.Generic.36628897 Malicious
McAfee
Artemis!8225468B722E Malicious
APEX
Malicious Malicious
BitDefender
Trojan.Generic.36628897 Malicious
McAfeeD
ti!E846258302D7 Malicious
FireEye
Trojan.Generic.36628897 Malicious
Ikarus
Trojan.MSIL.ClipBanker Malicious
Webroot
W32.Hacktool.Riskware Malicious
Microsoft
Trojan:Win64/Malgent!MSR Malicious
GData
Trojan.Generic.36628897 Malicious
Google
Detected Malicious
AhnLab-V3
Malware/Win.Generic.C5651715 Malicious
MAX
malware (ai score=80) Malicious
Cylance
Unsafe Malicious
Panda
Trj/Agent.ABC Malicious
Rising
Trojan.Malgent!8.10C33 (C64:YzY0OuAvCUOyIBEl) Malicious
Fortinet
W32/PossibleThreat Malicious
DeepInstinct
MALICIOUS Malicious
56 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: e7b2d543bd06a5443006862de77dce7a
Fuzzy: abe728ad32c2d355009457d2e469922b
dHash: 9299b86edef670b1
Image Base 0x140000000
Entry Point 0x140014310
Compilation Time 2023-10-19 10:08:00
Checksum 0x00000000 (Actual: 0x00bd8bd7)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
Digital Signature The PE file does not contain a certificate table.
Imports 12 libraries
Exports 0 functions
Resources 4 Resources
Sections 7 Sections

Version Information

▼
Translation 0x0000 0x04b0
CompanyName Galaxy Swapper v2
FileDescription Galaxy Swapper v2
FileVersion 1.00
InternalName Galaxy Swapper v2.dll
LegalCopyright Copyright © Galaxy Swapper v2
OriginalFilename Galaxy Swapper v2.dll
ProductName Galaxy Swapper v2
ProductVersion 1.0.0+b3ff6534c34b1a682d20c4c8c6e20d6a3a6103b0
Assembly Version 1.0.0.0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 101,468 bytes 101,888 bytes 6.34 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ DB619AD0F43936A062F6ECBA78F61F6C
.rdata 0x0001a000 39,970 bytes 40,448 bytes 4.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7CBD43BF2A1D98DF014F1F38EC45A295
.data 0x00024000 5,480 bytes 2,560 bytes 2.65 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BDFC3E9E272F7031CEC7D2D825927C76
.pdata 0x00026000 5,460 bytes 5,632 bytes 5.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A17FA188176F389A31994955D6F12E26
_RDATA 0x00028000 348 bytes 512 bytes 3.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2BB8B9E702535D216CF9F725E3678D9B
.reloc 0x00029000 840 bytes 1,024 bytes 4.89 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3EBDD3C3BCD1B19AA6D3E24E5082BA06
.rsrc 0x0002a000 6,000 bytes 6,144 bytes 4.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6B9DF6DE067A6C50151FCA60CE300F53

Resource Analysis

▼
Total Resources: 4 (5,694 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 4,264 bytes
74.9%
RT_GROUP_ICON 1 20 bytes
0.4%
RT_VERSION 1 920 bytes
16.2%
RT_MANIFEST 1 490 bytes
8.6%

Certificate Chain Analysis

▼
Certificate Information
Product Galaxy Swapper v2
Description Galaxy Swapper v2
File Version 1.00
Original Name Galaxy Swapper v2.dll
Internal Name Galaxy Swapper v2.dll
Copyright Copyright © Galaxy Swapper v2
Certificate Chain Summary
Epic Games Inc. #1 Primary
Validity Period: 2021-02-25 00:00:00 → 2024-02-29 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D FE 7B A4 82 F0 76 DB 90 BC C2 2B 2C 48 7C BD
DigiCert SHA2 Assured ID Code Signing CA #2 Chain
Validity Period: 2013-10-22 12:00:00 → 2028-10-22 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 09 18 1B 5F D5 BB 66 75 53 43 B5 6F 95 50 08
Sectigo RSA Time Stamping CA #3 Chain
Validity Period: 2019-05-02 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 30 0F 6F AC DD 66 98 74 7C A9 46 36 A7 78 2D B9
Sectigo RSA Time Stamping Signer #2 #4 Chain
Validity Period: 2020-10-23 00:00:00 → 2032-01-22 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 8C 77 A0 00 8F F4 D1 B0 C6 3D 9F 3A 48 83 8D 6B
Symantec SHA256 TimeStamping CA #5 Chain
Validity Period: 2016-01-12 00:00:00 → 2031-01-11 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B 05 B1 D4 49 68 51 44 F7 C9 89 D2 9C 19 9D 12
Symantec SHA256 TimeStamping Signer - G3 #6 Chain
Validity Period: 2017-12-23 00:00:00 → 2029-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B D4 E5 AF BA CC 07 3F A1 01 23 04 22 41 4D 12
DigiCert CS RSA4096 Root G5 #7 Chain
Validity Period: 2021-01-15 00:00:00 → 2046-01-14 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 06 CE E1 31 BE 6D 55 C8 07 F7 C0 C7 FB 44 E6 20
.NET Foundation Projects Code Signing CA2 #8 Chain
Validity Period: 2021-07-15 00:00:00 → 2031-07-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A DE 32 E9 50 9B 44 AA 34 B1 DA F1 BC 0E C8 73
Json.NET (.NET Foundation) #9 Chain
Validity Period: 2021-08-13 00:00:00 → 2024-10-29 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C D1 40 7A 5A BD ED 43 D5 C1 73 12 1D 38 C5 29
DigiCert Timestamp 2022 - 2 #10 Chain
Validity Period: 2022-09-21 00:00:00 → 2033-11-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 4D 69 72 4B 94 FA 3C 2A 4A 3D 29 07 80 3D 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #11 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #12 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
19 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware