BroomSetup.exe Trojan Gen Analysis
| Online Virus Checker | v.1.0.172.174 |
| DB Version: | 2024-04-22 18:00:49 |
Trojan.Win32.Gen.cc
This is a generic detection name used to identify a potentially harmful or suspicious file or program that exhibits characteristics of a Trojan horse. It is malware that disguises itself as a legitimate or benign program but contains malicious code or functions.
| File | BroomSetup.exe |
| Checked | 2024-04-22 18:27:14 |
| MD5 | 00e93456aa5bcf9f60f84b0c0760a212 |
| SHA1 | 6096890893116e75bd46fea0b8c3921ceb33f57d |
| SHA256 | ff3025f9cf19323c5972d14f00f01296d6d7a71547eca7e4016bfd0e1f27b504 |
| SHA512 | abd2be819c7d93bd6097155cf84eaf803e3133a7e0ca71f9d9cbc3c65e4e4a26415d2523a36adafdd19b0751e25ea1a99b8d060cad61cdfd1f79adf9cd4b4eca |
| Imphash | 0fb01de1d7eeb777ba27206dd99d7f7f |
| File Size | 5515264 bytes |
Trojan.Win32.Gen.cc Removal
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Gen.cc without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| FileVersion | 1.0.0.0 |
| ProductVersion | 1.0.0.0 |
| ProgramID | com.embarcadero.Broom |
| FileDescription | Broom |
| ProductName | Broom |
| Translation | 0x0409 0x04e4 |
Portable Executable Info
 |
19a8f5066b61054d2e2e170f811b777e fcb2c782547e4e5f20f6622b57c14f5f 2090c270185a5c2c |
| Image Base: | 0x00400000 |
| Entry Point: | 0x007f3108 |
| Compilation: | 2020-05-29 13:18:34 |
| Checksum: | 0x00000000 (Actual: 0x0055278a) |
| OS Version: | 5.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 11 |
| Imports: | winspool, comdlg32, comctl32, shell32, user32, version, oleaut32, wtsapi32, advapi32, netapi32, msvcrt, kernel32, ole32, gdi32, |
| Exports: | 3 |
| Resources: | 137 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x003ed55c | 0x003ed600 | 02d65e8ba8e23b2a6b593769d377ef14 | 6.49 |
| .itext | 0x003ef000 | 0x000041f4 | 0x00004200 | 9362548acb623f07f3255d694038167f | 6.01 |
| .data | 0x003f4000 | 0x0000de64 | 0x0000e000 | b30c6747b79184fc15b1346d7c0af12f | 6.32 |
| .bss | 0x00402000 | 0x0001bcd0 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .idata | 0x0041e000 | 0x00003c40 | 0x00003e00 | cc7d6c31a64879087b19812363a41f43 | 5.22 |
| .didata | 0x00422000 | 0x00000b8a | 0x00000c00 | 5a039047ffd58dc92780ce0788279c00 | 4.19 |
| .edata | 0x00423000 | 0x00000097 | 0x00000200 | efb1078d4e1440beeaeebada472c8a4e | 1.85 |
| .tls | 0x00424000 | 0x00000054 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rdata | 0x00425000 | 0x0000005d | 0x00000200 | 54cdcf319cd68c9316a6ef757fc2bdfc | 1.38 |
| .reloc | 0x00426000 | 0x0004c074 | 0x0004c200 | 7ef792478bb9d4f186ee0fd9cfcb4442 | 6.72 |
| .rsrc | 0x00473000 | 0x000f1c00 | 0x000f1c00 | e5838325e4d5785f66f989e84b96046f | 5.23 |
