home

GScraper.exe

GScraper

Jitesi

The application GScraper.exe has been detected as a potentially unwanted program by 20 anti-malware scanners.
Publisher:
Jitesi

Product:
GScraper

Version:
1.2.3.8

MD5:
cbb0df8823eda13c3d16b761d0e84a67

SHA-1:
5e4fb10fa999d4a69698817326c37ea9cd75903f

SHA-256:
6c075538df86925275aa889c1f66b25965bf0ffc612025f561216a69ea04921e

Scanner detections:
20 / 68

Status:
Potentially unwanted

Analysis date:
5/7/2024 11:36:44 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.11689536
801

Avira AntiVirus
TR/Crypt.XPACK.Gen2
7.11.177.172

avast!
Win32:Tcpz-B [PUP]
2014.9-141126

Baidu Antivirus
Hacktool.Win32.TCPZ
4.0.3.141126

Bitdefender
Trojan.Generic.11689536
1.0.20.1650

Comodo Security
UnclassifiedMalware
19768

Emsisoft Anti-Malware
Trojan.Generic.11689536
8.14.11.26.08

ESET NOD32
Win32/TCPZ (variant)
8.10547

Fortinet FortiGate
Riskware/Tcpz
11/26/2014

F-Secure
Trojan.Generic.11689536
11.2014-26-11_4

G Data
Trojan.Generic.11689536
14.11.24

IKARUS anti.virus
Trojan.Crypt
t3scan.1.7.8.0

McAfee
Artemis!CBB0DF8823ED
5600.6935

MicroWorld eScan
Trojan.Generic.11689536
15.0.0.990

Norman
Obfuscated.gen!r
11.20141126

nProtect
Trojan.Generic.11689536
14.10.10.01

Sophos
Generic PUA FO
4.98

Trend Micro House Call
TROJ_GEN.R047C0OHV14
7.2.330

Trend Micro
TROJ_GEN.R047C0OHV14
10.465.26

VIPRE Antivirus
Trojan.Win32.Generic
33834

File size:
8 MB (8,429,568 bytes)

Product version:
1.2.3.8

Copyright:
Copyright Jitesi© 2013

Trademarks:
http://www.jitesi.com

Original file name:
GScraper.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\nov2\nov\oct\september\august\gscraper 1.2.3.8\gscraper 1.2.3.8\gscraper\gscraper.exe

File PE Metadata
Compilation timestamp:
11/17/2013 9:04:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:ZBrtDPBdrqFmpNyasClTMG8pDRPRhglWJCUb3vkanEobzx5n5tMEaXCoz8v1uRo/:ZBrtDPBdrXMOMc+TnDMHzzoUjJ604

Entry address:
0x3AF81E

Entry point:
FF, 25, 00, 20, 3C, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.2844

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3.7 MB (3,856,896 bytes)

Remove GScraper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.