home

SpyShelter.exe

SpyShelter

Datpol

Publisher:
Datpol  (signed and verified)

Product:
SpyShelter

Description:
SpyShelter GUI

Version:
10,6,1,0

MD5:
37f5cdbff0c1180c6fbd3a5b3cec7fab

SHA-1:
f8d855e229d8beb95293c229b935ce3dccde531c

SHA-256:
e5915b156af0f817e84bb0905bbd013b2e74a902d6c1166fa96ee49bdbf76cec

Scanner detections:
5 / 68

Status:
Clean  (5 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
1/13/2025 6:04:15 PM UTC  (today)

Scan engine
Detection
Engine version

F-Secure
Adware.MultiPlug.CY
11.2015-22-12_3

IKARUS anti.virus
not-a-virus:AdWare.Amonetize
t3scan.1.9.5.0

Qihoo 360 Security
HEUR/QVM19.1.Malware.Gen
1.0.0.1077

Rising Antivirus
PE:Malware.RDM.17!5.17[F1]
23.00.65.151220

Vba32 AntiVirus
Malware-Cryptor.General.6
3.12.26.4

File size:
3 MB (3,171,848 bytes)

Product version:
10,6,1,0

Copyright:
(C) Datpol. All rights reserved.

Original file name:
SpyShelter.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\spyshelter free anti-keylogger\spyshelter.exe

Digital Signature
Signed by:
Datpol

Authority:
GlobalSign nv-sa

Valid from:
9/9/2015 4:37:53 PM

Valid to:
9/9/2016 4:37:53 PM

Subject:
CN=Datpol, O=Datpol, L=Olkusz, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C3B40F5627D2C5927A0D3740680419CC

File PE Metadata
Compilation timestamp:
12/22/2015 12:15:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:sTxHlMe+cqpYV7EAYkMvTmzokeIF8m5/x:sTxHlMe8pYJ7YlrmsRID5p

Entry address:
0x7D9F58

Entry point:
EB, 08, A1, 97, 01, 00, 00, 00, 00, 00, E9, 2D, 69, D2, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9327  (probably packed)

Code size:
2.9 MB (3,063,808 bytes)

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):
Connects to spyshelter.com  (92.51.134.197:80)

Scan SpyShelter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.