Gridinsoft Logo
File Icon

Viltrox Lens_v1.0.7.exe Trojan Heuristic Analysis

Updated 7 days ago
Checked by Malware Check
Viltrox Lens_v1.0.7.exe

Technical Analysis

File Name Viltrox Lens_v1.0.7.exe
File Type
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Scanner Version 1.0.219.174
Database Version 2025-07-08 12:00:32 UTC
⚠

Trojan.Heur!.01250021

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
33,006,088
File Size (bytes)
2025-07-08
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ff4be4cec8a90fb04c490c0719ddba14
SHA1
5b26ca2b7ded8c38b80dace6cc564d0e84fee6eb
SHA256
f0521a36934c6c61c579b58cd5ce9cd7383ec237b57ad195dae30e354db07b9b
SHA512
c415444f9910db6c157ce12d121569fad351407db9f302d08d54322a4bfb58742d99f8f43a033f8f7e2d179ea7cf65b4dbc17c24d78c718194aa3f510695b2e1
ImpHash
2f727a975c44a2925ace416e4a5ad2d8

PE Analysis

Basic Information

▼
Icon
Hash: 16886c67ad1f91941732c7bb1f9fad31
Fuzzy: e1ae3e429895f0e200f5c527e4e9bc40
dHash: ccb2716971459ecc
Image Base 0x00400000
Entry Point 0x00401480
Compilation Time 2025-06-17 06:51:38
Checksum 0x01f7ba40 (Actual: 0x01f7ba40)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Digital Signature OK
Imports 8 libraries
kernel32, user32, advapi32, oleaut32, ole32, ntdll, SHFolder, shlwapi
Exports 25 functions
Resources 7 Resources
Sections 13 Sections

Version Information

▼
CompanyName LYLens
FileDescription Viltrox Lens PC
FileVersion 1.0.7.0
LegalCopyright Copyright 漏 2023
OriginalFilename Viltrox Lens.exe
ProductName Viltrox Lens PC
ProductVersion 1.0.7.0
Translation 0x0800 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 305,488 bytes 305,664 bytes 6.23 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_16BYTES 2CA0F0356A82B2942CA47C841E73D12A
.data 0x0004c000 1,432 bytes 1,536 bytes 6.62 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES 2D4096F4D53FEDA0D5F08991E9A47B93
.rdata 0x0004d000 2,545,120 bytes 2,545,152 bytes 7.98 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_32BYTES 98828FF54B6DAD5E30D593EF44958C97
.eh_fram 0x002bb000 22,940 bytes 23,040 bytes 5.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 92A10D37DD520F56409CA9D2BE082822
.bss 0x002c1000 15,916 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES D41D8CD98F00B204E9800998ECF8427E
.edata 0x002c5000 774 bytes 1,024 bytes 4.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES BCFB25DB3BD3A5F0ABC60652CF27BB35
.idata 0x002c6000 22,904 bytes 23,040 bytes 5.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 12CB05FD376525FBC29810F6FF67E1A9
.CRT 0x002cc000 52 bytes 512 bytes 0.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 865D38D25408CFD5FF83AD25F0C04317
.tls 0x002cd000 8 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x002ce000 42,744 bytes 43,008 bytes 7.23 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 01AFE7865F03204B1957FAB2D05727C9
.reloc 0x002d9000 26,664 bytes 27,136 bytes 6.65 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES B068F4464AE662D732E9DDC6E725EEBD
.enigma1 0x002e0000 4,096 bytes 29,716,480 bytes 7.94 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C03C3C0E3858D7ED86EFC5CB9F446E7C
.enigma2 0x002e1000 307,200 bytes 307,200 bytes 5.95 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F0A01B8928B21BC018986C0DE0105E50
Entropy Analysis Alert

2 section(s) with high entropy (≥7.5) detected - possible packing/encryption

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 7 (42,285 bytes)
Resource Type Count Total Size Percentage
RT_ICON 5 41,557 bytes
98.3%
RT_GROUP_ICON 1 76 bytes
0.2%
RT_VERSION 1 652 bytes
1.5%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Trojan.Heur!.01250021 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.01250021 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware