File Name | Office_2024_EN_64Bits.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.217.174 |
Database Version | 2025-06-03 20:00:21 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
79dda55ff521d810eb573385a3d199be
|
|
SHA1 |
35bbd616d043182317254929d436dce01e980203
|
|
SHA256 |
04c3c5cf2f26c10a82444d4f9498557c89a4521331dace6427a1eb035327d605
|
|
SHA512 |
bda342cb122eb8462e1407f33789b8103fdf4b00182512403987fe06f4e34e5ac07d7b6a40291eeb1621e5d75d928b04a1571d1d244e2fc9c8ec40b350ccf27b
|
|
ImpHash |
f2f9102c7663962c22d17a8dabc5e7ce
|
Icon |
Hash: 8fab71978230f5ef0c7479b0ea3f1a3c
Fuzzy: 10697c6c1265ea01a5b7b02b9c40e659 dHash: 0c0c0c0c2c2c2c2c |
Image Base | 0x00400000 |
Entry Point | 0x0040a79e |
Compilation Time | 2009-11-02 20:23:03 |
Checksum | 0x0037747e (Actual: 0x0037747e) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | OK |
Imports |
6 libraries
SHELL32, USER32, KERNEL32, GDI32, ADVAPI32, COMCTL32 |
Exports | 0 functions |
Resources | 13 Resources |
Sections | 5 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
73,717 bytes | 73,728 bytes | 6.62 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
8AD57C6BAF27D65AE8DAE769B564AE30 |
.rdata |
0x00013000 |
14,146 bytes | 16,384 bytes | 4.94 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
5936658766CE0C07E562DCCD1DB5A0E3 |
.data |
0x00017000 |
59,204 bytes | 8,192 bytes | 1.98 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
CFF4E02C8CA79ED409F4FF0A33AD1238 |
.rsrc |
0x00026000 |
14,448 bytes | 16,384 bytes | 4.60 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
555AD4A9A89818BDEA0A0474AD6D8F73 |
_winzip_ |
0x0002a000 |
3,444,736 bytes | 3,444,736 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
7391EDBE436D37BED6D055E2F749DB52 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
WZ_MANIFEST | 1 | 1,503 bytes | |
RT_ICON | 1 | 1,181 bytes | |
RT_DIALOG | 2 | 1,040 bytes | |
RT_STRING | 7 | 8,328 bytes | |
RT_GROUP_ICON | 1 | 34 bytes | |
RT_MANIFEST | 1 | 1,503 bytes |
Signing Date | 12:00 PM 03/16/2025 (81 days ago) |
Verification Status | Signed |
Signers | Technik Markt TMA e.K.; Sectigo Public Code Signing CA EV R36; Sectigo Public Code Signing Root R46; Sectigo (AAA) |
Counter Signers | Sectigo Public Time Stamping Signer R35; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46 |
48 FC 93 B4 60 55 94 8D 36 A7 C9 8A 89 D6 94 16
33 D7 08 A8 91 40 53 19 E2 A5 BB D3 39 B9 AD 6E
9F AB 28 FF 25 12 CC 84 23 74 41 08 75 C4 DB 35
3A 52 6A 2C 84 CE 55 E6 1D 65 FC CC 12 D8 E9 89
7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68
✓ This file has been digitally signed and the certificate chain has been verified
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important