File Name | Multiplayer-Fix-Online.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.156.174 |
Database Version | 2024-01-28 00:02:47 UTC |
Malware family: Kryptik
Hash Type | Value | Action |
---|---|---|
MD5 |
8c4ef138ee2ba87c59a3071c64c1ae95
|
|
SHA1 |
4f7c62ad791f47b7b85491d567b4b0ad711cae40
|
|
SHA256 |
f92142cef96a2905ac375b05aaddc593df2fb2d6754e22506b1bca346a60dfc3
|
|
SHA512 |
8c35506fb66647d3483787b38b6635dd52f6a6b22fff17b39af47c1d7f7e999c29bd860105bc42fe7d56e0e4ab13c9366d6fb92232142a4a906ad166d9c13017
|
|
ImpHash |
140094f13383e9ae168c4b35b6af3356
|
Icon |
Hash: efd91d4d402e6c1263ebeae6d92a8497
Fuzzy: b1b95401fa8317fecabce5152314b810 dHash: f0f0ea29a9f2ec70 |
Image Base | 0x00400000 |
Entry Point | 0x00401000 |
Compilation Time | 2024-01-09 21:48:35 |
Checksum | 0x0129c4a3 (Actual: 0x0129c4a3) |
OS Version | 1.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | The PE file does not contain a certificate table. |
Imports |
3 libraries
kernel32, Shlwapi, msvcrt |
Exports | 0 functions |
Resources | 5 Resources |
Sections | 3 Sections |
FileDescription | Lethal Company |
ProductName | Lethal Company |
FileVersion | |
ProductVersion | 1-1 |
LegalCopyright | |
OriginalFilename | |
Translation | 0x0409 0x0000 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
19,457,285 bytes | 19,457,536 bytes | 2.37 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
0546398FB50A8783943D1D4C31B79327 |
.idata |
0x01290000 |
508 bytes | 512 bytes | 4.17 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2846DC97D023D893E2262E58A71A5BE9 |
.rsrc |
0x01291000 |
16,248 bytes | 16,384 bytes | 5.70 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
33C6636FE1D9754D8F5C4766BD688EDB |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 3 | 15,352 bytes | |
RT_GROUP_ICON | 1 | 48 bytes | |
RT_VERSION | 1 | 520 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Kryptik.sa without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system