Gridinsoft Logo
File Icon

The andy49.exe File Analysis

Updated 1 month ago
Checked by Malware Check
andy49.exe

Technical Analysis

File Name andy49.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-16 05:00:22 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
11,815,631
File Size (bytes)
2025-11-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7d7778ec6afa3c9468b73b61f2411eee
SHA1
604034a23a197064ccef85fbafad4e061b9ff62b
SHA256
02082547c01720f7bfbd8d2755482002370ea86473e7e2746d5e311b864f6041
SHA512
2672e5413f2c3d13b334d39271e9e662b01e1833e8fd9392fdeaad01d2410d9cfa6048793a2601728bc850e5e4e27f37eed888f84458e9492d9b58d672591c51
ImpHash
be41bf7b8cc010b614bd36bbca606973

PE Analysis

Basic Information

▼
Icon
Hash: 2114d0331c50954a8a09ec8b6090b6eb
Fuzzy: 5f3a089d6d4e0bf0a464a42a149832f4
dHash: 232b2b0f4d3b1f0c
Image Base 0x00400000
Entry Point 0x004038af
Compilation Time 2012-02-24 19:20:04
Checksum 0x00000000 (Actual: 0x00b5167a)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 8 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION
Exports 0 functions
Resources 21 Resources
Sections 6 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 29,324 bytes 29,696 bytes 6.50 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 419D4E1BE1AC35A5DB9C47F553B27CEA
.rdata 0x00009000 11,118 bytes 11,264 bytes 4.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CCA1CA3FBF99570F6DE9B43CE767F368
.data 0x0000c000 469,916 bytes 512 bytes 1.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 77F0839F8EBEA31040E462523E1C770E
.ndata 0x0007f000 593,920 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00110000 212,712 bytes 212,992 bytes 5.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7CC2C60002C2E1E7B78FFCCEF02EE294
.reloc 0x00144000 4,054 bytes 4,096 bytes 2.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 30D00BE55B641DBBCB7EDC2BC4EF8997
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 21 (211,566 bytes)
Resource Type Count Total Size Percentage
RT_ICON 14 209,453 bytes
99%
RT_DIALOG 5 1,368 bytes
0.6%
RT_GROUP_ICON 1 202 bytes
0.1%
RT_MANIFEST 1 543 bytes
0.3%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware