The vanguard emulator exe File Malware Analysis
Gridinsoft Logo

The vanguard_emulator.exe File Analysis

Updated 1 month ago
Checked by Malware Check
vanguard_emulator.exe

Technical Analysis

File Name vanguard_emulator.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (console) x86-64, for MS Windows
SSDEEP Hash
24576:c+NflSwrdIkGPnvZfCV3mGM+Ec0xMk58UsU3AoMTnZ6hHEtry:/NflSwrJAfCIwTnZ6hHEtry
Scanner Version 1.0.229.174
Database Version 2025-12-01 04:00:28 UTC
⚠

Suspicious File Detected

Detected by 31 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
44%
Detection Rate
3,073,834
File Size (bytes)
31/71
Engines Detected
2025-12-01
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
44dad6e3eb2597c5f64165731c033ac7
SHA1
a3e4cb6847723be31c04bfaadef98ac9941ba291
SHA256
f54ad11c323d0ba288c8b7f8112c2d496063725654037e02ebcd347840a83b08
SHA512
5af7a9f9de0bc6ae770173d61997b9b448cf88b5c8b53f469cabeeee2f070efad63ac94a0899a77289235c5e66eb48ed50cfd243e376f8436ab8be491a21cc56
ImpHash
0793745b16b74adae9363e1bb5c0c891

Security Engines with Detections (31 of 71)

Bkav
W64.AIDetectMalware Malicious
Lionic
Trojan.Win32.Generic.4!c Malicious
MicroWorld-eScan
Trojan.GenericKD.77858119 Malicious
CTX
exe.trojan.agen Malicious
Skyhigh
BehavesLike.Win64.Backdoor.vm Malicious
ALYac
Trojan.GenericKD.77858119 Malicious
VIPRE
Trojan.GenericKD.77858119 Malicious
BitDefender
Trojan.GenericKD.77858119 Malicious
Symantec
ML.Attribute.HighConfidence Malicious
ESET-NOD32
Win64/Agent_AGen.IVA trojan Malicious
APEX
Malicious Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H01KN25 Malicious
Cynet
Malicious (score: 99) Malicious
Alibaba
Trojan:Win64/MalwareX.21fd0444 Malicious
Sophos
Mal/Generic-S Malicious
McAfeeD
ti!F54AD11C323D Malicious
Emsisoft
Trojan.GenericKD.77858119 (B) Malicious
Ikarus
Worm.Win64.Autorun Malicious
GData
Trojan.GenericKD.77858119 Malicious
Varist
W64/ABTrojan.LOPC-4003 Malicious
Arcabit
Trojan.Generic.D4A40547 Malicious
Microsoft
Trojan:Win32/Egairtigado!rfn Malicious
Google
Detected Malicious
AhnLab-V3
Trojan/Win.Generic.C5817994 Malicious
DeepInstinct
MALICIOUS Malicious
Rising
Trojan.Agent!8.B1E (CLOUD) Malicious
TrellixENS
Artemis!44DAD6E3EB25 Malicious
Fortinet
PossibleThreat.RF Malicious
AVG
Win64:MalwareX-gen [Misc] Malicious
Avast
Win64:MalwareX-gen [Misc] Malicious
alibabacloud
Trojan:Win/Agent_AGen.IYZ Malicious
40 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x1400014e0
Compilation Time 2025-11-18 07:24:54
Checksum 0x002eff19 (Actual: 0x002eff19)
OS Version 4.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 3 libraries
ADVAPI32, KERNEL32, msvcrt
Exports 0 functions
Resources 1 Resources
Sections 19 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 819,800 bytes 820,224 bytes 6.15 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_16BYTES C92F89945C397D7157E847DC89AE59BC
.data 0x000ca000 12,016 bytes 12,288 bytes 0.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES 5072666FC76A33D95E379A19BB7DD18B
.rdata 0x000cd000 71,552 bytes 71,680 bytes 4.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_32BYTES D5DF2B88F3F94ED1E92F2006C14A5751
.pdata 0x000df000 48,744 bytes 49,152 bytes 6.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 631EA3D1295BAB1A9FBDD808857167DF
.xdata 0x000eb000 69,408 bytes 69,632 bytes 4.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 4AAEFF3AC67FC9034EB17650068F90F5
.bss 0x000fc000 4,144 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES D41D8CD98F00B204E9800998ECF8427E
.idata 0x000fe000 6,592 bytes 6,656 bytes 4.64 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 17F14EC5FA156F2F0F2E3DE93BF91814
.CRT 0x00100000 112 bytes 512 bytes 0.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_8BYTES 41EFB8F0F20E39F8DC35D4B300D0CE57
.tls 0x00101000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_8BYTES BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x00102000 1,256 bytes 1,536 bytes 4.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES E4ADC98B726A115CA2B30D1D5A96AD6D
.reloc 0x00103000 6,140 bytes 6,144 bytes 5.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES F8BA8DFD5C479C7B608ABE1AFD380143
/4 0x00105000 2,704 bytes 3,072 bytes 1.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_16BYTES 7D55B0650A868B064C1690855ADB6FB1
/19 0x00106000 122,117 bytes 122,368 bytes 5.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 8875FEDEDCB36D1C6AB36BBF0CD754D4
/31 0x00124000 20,525 bytes 20,992 bytes 4.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES CD67C9B60A9C9F53586585D63A0870A3
/45 0x0012a000 57,598 bytes 57,856 bytes 5.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES C28FF157B84054B8399EF05BEBFE6855
/57 0x00139000 14,320 bytes 14,336 bytes 3.72 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_8BYTES 505D8894361F102A45D00759882358F9
/70 0x0013d000 3,213 bytes 3,584 bytes 4.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES F1B261F3B86BADB9F618827C899827C6
/81 0x0013e000 156,490 bytes 156,672 bytes 2.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 23ECACE6D54FD23633599588EF3663EA
/92 0x00165000 9,328 bytes 9,728 bytes 1.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 4CE58FEF2E8D39B359BB92D13756D6E7

Resource Analysis

▼
Total Resources: 1 (1,167 bytes)
Resource Type Count Total Size Percentage
RT_MANIFEST 1 1,167 bytes
100%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
31 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware