GridinSoft Threat Intelligence

gview.exe threat report

Detected as Trojan.Generic File reputation report
MD5 e2cd79f230985b3195d04553e53dd07b
Latest seen 2024-07-17 23:04:21 (2 years ago)
First seen 2024-07-17 23:04:21 (2 years ago)
Size 1 MB
Publisher Invensys Systems, Inc.

GridinSoft Anti-Malware detection

Detected by GridinSoft before you download

The current ThreatInfo record shows this exact file hash detected as Trojan.Generic. Download GridinSoft Anti-Malware to scan the device, confirm whether this file is present, and remove the detected object if it is found.

Detection name
Trojan.Generic
Recommended action
Scan and remove
Last analysis
2024-07-17 23:04:21 (2 years ago)
File hash
e2cd79f230985b3195d04553e53dd07b
Download Anti-Malware

Why it matters

Why GridinSoft flags this file

Detection

GridinSoft identifies the sample as Trojan.Generic, part of the Trojan threat category.

Category context

Malware disguised as legitimate software or delivered through deceptive packaging. Related Trojan reports help compare this file with nearby detections, publishers, and hashes.

Timeline

First seen 2024-07-17 23:04:21 (2 years ago); latest analysis 2024-07-17 23:04:21 (2 years ago).

Publisher context

Company metadata: Invensys Systems, Inc..

Observed locations

ThreatInfo has seen this file in user or system paths listed below. Unexpected locations increase the need for local verification.

Recommended action

What to do next

  1. Compare the MD5 above with the file found on the device.
  2. Check whether the file appears in the observed locations or under one of the alternate names.
  3. Run GridinSoft Anti-Malware to confirm the detection and remove the file if it is present. Review the Trojan category for related samples and common context.

File context

gview.exe is a Windows file recorded in the ThreatInfo database. The reported company name is Invensys Systems, Inc.. The current detection status is Trojan.Generic, based on the latest analysis from 2024-07-17 23:04:21 (2 years ago). ThreatInfo groups this verdict with Trojan reports for broader family-level investigation.

If gview.exe appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Trojan.Generic.

File Details

Company Name: Invensys Systems, Inc.
MD5: e2cd79f230985b3195d04553e53dd07b
Size: 1 MB
First Published: 2024-07-17 23:04:21 (2 years ago)
Latest Published: 2024-07-17 23:04:21 (2 years ago)
Status: Trojan.Generic (on last analysis)
Analysis Date: 2024-07-17 23:04:21 (2 years ago)

Detection screenshot

gview.exe detection screenshot

The screenshot is a visual record of a GridinSoft Anti-Malware detection for this sample. Use the hash and metadata above as the primary identifiers when comparing the file on your system.

Common Places:

%sysdrive%\edison acer 2023\trabajos ieo ipc\0.5 documentos ups\tesis ups\intouch_hello\intouch\intouch 8.0

ThreatInfo has observed gview.exe in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

Geographic signal

Observed country distribution

ThreatInfo has seen gview.exe across 1 countries. Use this signal to compare local evidence with where the sample is most often reported.

Top country Ecuador
Share 100.0%
Low High activity

The strongest geographic signal for this file is Ecuador with 100.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

OS Version:

Windows 10 100.0%

The most common operating system signal for gview.exe is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

Analysis

gview.exe is identified as pe for 32-bit systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Format pe
Architecture 32-bit
Subsystem Windows GUI
Entry point 0x000824f6
Image base 0x00400000

PE Sections:

Sections 62
Raw data 1085440

Section layout highlights raw-size concentration, repeated names, packer markers, and hashes that can be compared across related samples.

.text 536576 bytes · 49.4% of section data
MD5 bfcd157a5641267a1c16b639d4c69854
VIEWWNDP 16384 bytes · 1.5% of section data
Uncommon name
MD5 7712941ecb6d864138613081e2d81a51
VURARE_T 4096 bytes · 0.4% of section data
Uncommon name
MD5 b1b7db403505282139e97903973c6f1b
FASTLOAD 8192 bytes · 0.8% of section data
Uncommon name
MD5 4d17e85945ce1c0823e8a323d1f755bb
FASTSAVE 4096 bytes · 0.4% of section data
Uncommon name
MD5 71156a864487f49872454fcf13659874
GETGLOBA 4096 bytes · 0.4% of section data
Uncommon name
MD5 554b1cc45f1e8c9ba83b5309214dd3e2
CMBNRECT 4096 bytes · 0.4% of section data
Uncommon name
MD5 6c6cc18221cff2c8ca347682f8460148
VUMENU_T 8192 bytes · 0.8% of section data
Uncommon name
MD5 32175109d25e8de0c5dcecb6f6189a9c
VUINIT_T 8192 bytes · 0.8% of section data
Uncommon name
MD5 941672394d7afd17b7b01bd1782cdb21
FREEMEM 4096 bytes · 0.4% of section data
Uncommon name
MD5 9db4a9b9863896c08e81ca9fe14f8e7e
TIME_UPD 4096 bytes · 0.4% of section data
Uncommon name
MD5 ccf692447539fea784484df191195143
WINLOCK 4096 bytes · 0.4% of section data
Uncommon name
MD5 f5a6f3c2648fb79c1e956234f0c40ac5
DBCHGMSG 4096 bytes · 0.4% of section data
Uncommon name
MD5 8ee97612c5f3eecfa663aff461cd14b9
SHOWHIDE 4096 bytes · 0.4% of section data
Uncommon name
MD5 8a2dec92a51c38c1c1a8bacb6e078164
VUDELETE 4096 bytes · 0.4% of section data
Uncommon name
MD5 bcbb220fda87b06b394f7949469a773f
SHOWHIDE 4096 bytes · 0.4% of section data
Uncommon name
MD5 59889a8647baee1dc9f26c0e3e1016a1
HIDEALL 4096 bytes · 0.4% of section data
Uncommon name
MD5 d65f0c794f1ae41931fbc1f198bdc88b
ACTIVATE 4096 bytes · 0.4% of section data
Uncommon name
MD5 557a45c2e6af6b88b3df18a49b049959
TIMEREVE 4096 bytes · 0.4% of section data
Uncommon name
MD5 4dc9025100d5d99237be12ab5660539d
MOUSE_TE 4096 bytes · 0.4% of section data
Uncommon name
MD5 981d16c2fd445fc0f04e3fa65dd6a0ae
MOUSEMOV 4096 bytes · 0.4% of section data
Uncommon name
MD5 e43f512d7012ddc1ab2343a114cada38
SLIDER_T 4096 bytes · 0.4% of section data
Uncommon name
MD5 81139430e9ac66b68187258c9f896dd3
CHECKTOU 4096 bytes · 0.4% of section data
Uncommon name
MD5 7c96a20ad9101a2160c5298ee2191e83
VUINPDLG 4096 bytes · 0.4% of section data
Uncommon name
MD5 4578f28998e1e50906ab067aa85281b9
CHECKTOU 4096 bytes · 0.4% of section data
Uncommon name
MD5 dcbdce6cc3278516b8c4bf65e06b8072
TOUCHFRA 4096 bytes · 0.4% of section data
Uncommon name
MD5 740fc2582daa145189c5ef19e393e36b
ARROWKEY 4096 bytes · 0.4% of section data
Uncommon name
MD5 8e0401bb3b45afed190dd5733580a57a
FASTLOAD 4096 bytes · 0.4% of section data
Uncommon name
MD5 8366f42452db1bd5bffa910c75d6304f
VULDWIN_ 4096 bytes · 0.4% of section data
Uncommon name
MD5 fc7606e34797db55e5ae67832900e7c9
CHECK_TR 4096 bytes · 0.4% of section data
Uncommon name
MD5 f7a740d139d1c9bb90326533230c7aa9
TREND_UP 8192 bytes · 0.8% of section data
Uncommon name
MD5 e790f2a673b68dbeaf4b4b5568d11dc4
UPDATE_L 4096 bytes · 0.4% of section data
Uncommon name
MD5 9b19ab66756eff5cf9fdab9b756ee75e
CHG_HPCT 4096 bytes · 0.4% of section data
Uncommon name
MD5 6ff6f48cc7ca03e3d1433daf6d116778
CHG_VPCT 4096 bytes · 0.4% of section data
Uncommon name
MD5 b57052ba18f93fb33e782b23fe2f67a0
CHG_TEXT 8192 bytes · 0.8% of section data
Uncommon name
MD5 a9d6e375d7f23aea5f8951f97e041bd9
CONSOLID 4096 bytes · 0.4% of section data
Uncommon name
MD5 7c2ffef92f2bb5ac792f512caf822a79
CHG_VISI 4096 bytes · 0.4% of section data
Uncommon name
MD5 2060f5beb268b9ba093f1820003e4bef
CHG_DISA 4096 bytes · 0.4% of section data
Uncommon name
MD5 71ca222939d686a8168034a7e6b414d0
UPDATE_C 4096 bytes · 0.4% of section data
Uncommon name
MD5 d33e0634f1e6bc5c5636231d69fae9df
VUPAINT_ 4096 bytes · 0.4% of section data
Uncommon name
MD5 165aca06ace1f838b824f79e51a2b61c
VIEWSETB 4096 bytes · 0.4% of section data
Uncommon name
MD5 018d4db6f5c2cbc35f47650686f5ad29
CHG_HEIG 4096 bytes · 0.4% of section data
Uncommon name
MD5 c69947d2c1906e9e8110a0c51fb701c0
CHG_WIDT 4096 bytes · 0.4% of section data
Uncommon name
MD5 3e6f2342af4d3062406dc0cabacc1dd3
CHG_HLOC 4096 bytes · 0.4% of section data
Uncommon name
MD5 c0153644013eb7bc6f2ab7bf8df3b666
CHG_VLOC 4096 bytes · 0.4% of section data
Uncommon name
MD5 b3c29b02a3b224faed9d4a8a2fb6b0e0
CHG_LOCA 4096 bytes · 0.4% of section data
Uncommon name
MD5 4eb57380b18aea1bf230966436d77f50
UPDATECO 4096 bytes · 0.4% of section data
Uncommon name
MD5 0db4c678656f44a0df6b2cd08e53a108
UPDATECO 4096 bytes · 0.4% of section data
Uncommon name
MD5 a9077b109ed99003d0107df3ce3dbf07
UPDATECO 4096 bytes · 0.4% of section data
Uncommon name
MD5 d5d6ce8da1105d471a721b0943c6799e
OF_INIT 4096 bytes · 0.4% of section data
Uncommon name
MD5 3fd4ff44334413dd71e90bfeb1c5febd
WDWINDEX 4096 bytes · 0.4% of section data
Uncommon name
MD5 e3e5579703428a8054812ebbc1f5a69f
WDWINDEX 4096 bytes · 0.4% of section data
Uncommon name
MD5 bc975204cb3f94ab60441aef28282bed
WDWINDEX 4096 bytes · 0.4% of section data
Uncommon name
MD5 6ca70e153b32b879c182e7afb204614e
RTOPS_FU 4096 bytes · 0.4% of section data
Uncommon name
MD5 d9fd92c2a57023b386cd80f8f0479fcf
GETSAMPL 4096 bytes · 0.4% of section data
Uncommon name
MD5 ef483fa9444eea7914179f2c00d1b6f2
TRENDLOA 4096 bytes · 0.4% of section data
Uncommon name
MD5 2782a0ac5da1164731bed73d632fff86
TRENDDRA 4096 bytes · 0.4% of section data
Uncommon name
MD5 108081faa183a456d6d4bfe3577f9e4e
.rdata 24576 bytes · 2.3% of section data
MD5 c83fe97704e9153d6deab6e3565e6f56
.data 57344 bytes · 5.3% of section data
MD5 d5f1e3b262456ea1cc8cb0d3c725544d
.HOOKDAT 4096 bytes · 0.4% of section data
Uncommon name
MD5 620f0b67a91f7f74151bc5be745b7110
.rsrc 151552 bytes · 14.0% of section data
MD5 9a3330909cde0f5d996407f1e518ef76
.reloc 49152 bytes · 4.5% of section data
MD5 32c7b2daeeee128fdb2551f400cc9376

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

Report conclusion

GridinSoft detects this file as Trojan.Generic

This report identifies gview.exe by MD5 e2cd79f230985b3195d04553e53dd07b. It is part of the Trojan report group. If the same file is present on your device, scan the system and remove the detected object after confirming the hash and location.

Download GridinSoft Anti-Malware Scan the device and confirm whether this exact hash is present. Check this hash on VirusTotal

Recommended next steps

  • Compare the local file MD5 with e2cd79f230985b3195d04553e53dd07b.
  • Check the file path, publisher, and signature against the details in this report.
  • Run a GridinSoft scan and remove the object if the same hash is found. Use the Trojan category to compare similar reports.