File Name | Elsify Universal.exe |
File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
Scanner Version | 1.0.221.174 |
Database Version | 2025-07-20 07:00:24 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
d00d4fae3b5937e49ef81a8430801495
|
|
SHA1 |
261aaab27df06f1b89d4c775e7acd28145d38c1c
|
|
SHA256 |
0e7d6cbc337c4dbf3a6d34d6a89cea0add36ccd2c88550a433753e24ae59c30b
|
|
SHA512 |
35c66f9c94807c56aee87dd18fc6df5c1c176a557e8ec4568f51a29df3e2276dc8d28edf49d991e767d20bfd5ac07bbf2949b2d4bcc974dd34a2f33bc536cad1
|
|
ImpHash |
6dbf27f4c70fe2c8ed3e0122ba75d641
|
Icon |
Hash: 0e8b7604a60e990c7780a1d232b5034b
Fuzzy: c46694c9aef3991de6ac61656abcd3fd dHash: b231d99d39b275a6 |
Image Base | 0x140000000 |
Entry Point | 0x140013750 |
Compilation Time | 2023-06-20 19:58:07 |
Checksum | 0x00000000 (Actual: 0x0160e4b8) |
OS Version | 6.0 |
PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
PDB Path | D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb |
Digital Signature | No valid SignedData structure was found. |
Imports | 12 libraries |
Exports | 0 functions |
Resources | 4 Resources |
Sections | 7 Sections |
Translation | 0x0000 0x04b0 |
CompanyName | FrostChanger.de |
FileDescription | Elsify |
FileVersion | 1.0.0.0 |
InternalName | Elsify.dll |
LegalCopyright | Copyright (C) 2021-2023 FrostChanger |
OriginalFilename | Elsify.dll |
ProductName | Elsify |
ProductVersion | 1.0.0 |
Assembly Version | 1.0.0.0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
97,516 bytes | 97,792 bytes | 6.33 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
1E45F5FEA4E9767B001816CB81D8C172 |
.rdata |
0x00019000 |
37,578 bytes | 37,888 bytes | 4.52 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
4822B5B5D15A9336C883D61C5D1DA35F |
.data |
0x00023000 |
5,368 bytes | 2,560 bytes | 2.47 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
06E256764116D8A2E9ADC8CA773B3D25 |
.pdata |
0x00025000 |
5,160 bytes | 5,632 bytes | 4.82 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DF28E302A63772846FC062E836A155B8 |
_RDATA |
0x00027000 |
244 bytes | 512 bytes | 2.47 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
0C2832FB1DEEAC948CA9EF0B008B1E29 |
.rsrc |
0x00028000 |
253,752 bytes | 253,952 bytes | 6.20 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
07EB80B96A35E032639C80001CDFD24B |
.reloc |
0x00066000 |
792 bytes | 1,024 bytes | 4.69 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
0C507064CC9A2B6BA8F40830713E13FF |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 1 | 249,256 bytes | |
RT_GROUP_ICON | 1 | 20 bytes | |
RT_VERSION | 1 | 772 bytes | |
RT_MANIFEST | 1 | 3,400 bytes |
Product | Elsify |
Description | Elsify |
File Version | 1.0.0.0 |
Original Name | Elsify.dll |
Internal Name | Elsify.dll |
Copyright | Copyright (C) 2021-2023 FrostChanger |
0F D1 BB CA 79 6B D7 F8 DD 4C 82 E1 0A 9A 96 31
08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
05 48 19 54 D0 77 05 3F 0C 48 1D 76 6E A7 04 C6
0C 4D 69 72 4B 94 FA 3C 2A 4A 3D 29 07 80 3D 5A
07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
02 AC 5C 26 6A 0B 40 9B 8F 0B 79 F2 AE 46 25 77
07 B0 41 8D A5 1E 14 8C 33 1B BC DE B7 13 83 23
0B A6 99 C3 81 1B A1 6A BA 92 38 65 BA 32 F7 14
33 00 00 03 04 C1 03 19 7E C6 05 E4 04 00 00 00 00 03 04
61 0E 90 D2 00 00 00 00 00 03
33 00 00 01 96 49 5B 62 E1 2F DD F7 4F 00 01 00 00 01 96
33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15
33 00 00 03 05 4D 62 0D 68 85 07 AA 33 00 00 00 00 03 05
33 00 00 01 A3 FB 9A B3 8E 7B 86 43 4F 00 01 00 00 01 A3
✓ This file has been digitally signed and the certificate chain has been verified
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important