Gridinsoft Logo
File Icon

AA_v3.exe Risk RemoteAdmin Analysis

Updated 18 days ago
Checked by Malaware Check
AA_v3.exe

Technical Analysis

File Name AA_v3.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-19 18:00:25 UTC
⚠

Risk.Win32.RemoteAdmin.vl!c

Malware family: RemoteAdmin

RemoteAdmin tools provide legitimate remote system management capabilities but can be exploited by threat actors for unauthorized access and control over victim systems.
N/A
Detection Rate
817,272
File Size (bytes)
2025-05-19
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
90aadf2247149996ae443e2c82af3730
SHA1
050b7eba825412b24e3f02d76d7da5ae97e10502
SHA256
ee573647477339784dcef81024de1be1762833a20e5cc2b89a93e47d05b86b6a
SHA512
eec32bb82b230dd309c29712e72d4469250e651449e127479d178eddbafd5a46ec8048a753bc2c1a0fdf1dc3ed72a9453ca66fb49cbf0f95a12704e5427182be
ImpHash
3e985254f2e34ad96da799a2a5d33efe

PE Analysis

Basic Information

▼
Icon
Hash: 7d962bd6d0621ae9f589b0c76c33a1be
Fuzzy: abcdd4d5b2d45ebf39af201518031977
dHash: c1882ee499453525
Image Base 0x00400000
Entry Point 0x00486db8
Compilation Time 2020-09-15 16:09:42
Checksum 0x000d411b (Actual: 0x000d411b)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 16 libraries
Exports 0 functions
Resources 7 Resources
Sections 4 Sections

Version Information

▼
Comments
CompanyName Ammyy LLC
FileDescription Ammyy Admin
FileVersion 3.10
InternalName Ammyy Admin
LegalCopyright
LegalTrademarks
OriginalFilename
PrivateBuild
ProductName Ammyy Admin
ProductVersion 3.10
SpecialBuild
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 580,538 bytes 581,632 bytes 6.70 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E9FDCCBF9B6E9C08D2D25203218DA990
.rdata 0x0008f000 107,942 bytes 110,592 bytes 5.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9E1FE715F2C3B902583721ECC37F38A2
.data 0x000aa000 125,880 bytes 94,208 bytes 6.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F656B81B1A65CC5CD37A0A06E6DB25EB
.rsrc 0x000c9000 17,552 bytes 20,480 bytes 5.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 75B2D6B81820DDDB6DD4A0C0A5EF06DF
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 7 (17,043 bytes)
Resource Type Count Total Size Percentage
BINARY 1 1 bytes
0%
RT_ICON 3 14,776 bytes
86.7%
RT_GROUP_ICON 1 48 bytes
0.3%
RT_VERSION 1 744 bytes
4.4%
RT_MANIFEST 1 1,474 bytes
8.6%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Risk.Win32.RemoteAdmin.vl!c Removal

Gridinsoft has the capability to identify and eliminate Risk.Win32.RemoteAdmin.vl!c without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware