Gridinsoft Logo

The Keylogger.exe File Analysis

Updated 0 second ago
Checked by Malaware Check
Keylogger.exe

Technical Analysis

File Name Keylogger.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.218.174
Database Version 2025-06-10 07:00:15 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
62,951
File Size (bytes)
2025-06-10
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
b2f4967324344bad2baa4bc6115cf438
SHA1
477ee21fe9590fcff571e61d287b5123d5c8033e
SHA256
0f0eafb6abd5aac72f5157afe62e0130f149c712839ac6567805f22c6e8993eb
SHA512
99440734696c8e7e45c65c2cfbc450f5611e04275463acbcc5922419158f7253e77e79182228de0dd1747e439c25db0717066801582cf66a662f1ad7fa7286de
ImpHash
d3c2503a4bc68d0e25a58aa9dacfd5aa

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140001400
Compilation Time 2025-06-10 03:51:14
Checksum 0x000165a3 (Actual: 0x000165a3)
OS Version 4.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 10 libraries
KERNEL32, api-ms-win-crt-environment-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-private-l1-1-0, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-string-l1-1-0, api-ms-win-crt-time-l1-1-0, USER32
Exports 0 functions
Resources 0 Resources
Sections 16 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 9,120 bytes 9,216 bytes 5.77 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7144B285F3B78968C01D02AC209B1CAD
.data 0x00004000 240 bytes 512 bytes 1.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EAE8B740D795CA94F9E5F17124832AA0
.rdata 0x00005000 1,768 bytes 2,048 bytes 4.09 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2061818F74E540F14AE4EA6A666DBE38
.pdata 0x00006000 636 bytes 1,024 bytes 2.70 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8D5FDF802CEC50EC990B5DCCF76F5207
.xdata 0x00007000 496 bytes 512 bytes 3.59 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7FE9D904BAD0CCE8254DCF6031E773B2
.bss 0x00008000 416 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00009000 3,224 bytes 3,584 bytes 3.85 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4A859738BEFA691D8058115A0B0E60B8
.tls 0x0000a000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.reloc 0x0000b000 128 bytes 512 bytes 1.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 5390D0991C371362CBCF565340800331
/4 0x0000c000 80 bytes 512 bytes 0.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2ECD91B7F79B6D5D8E0EE9013658AE5F
/19 0x0000d000 4,598 bytes 4,608 bytes 5.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 8C368DCA2416E2AD8B6BA47772407B0D
/31 0x0000f000 181 bytes 512 bytes 2.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 16B80C9B89F230DEA98DFD24D54FF448
/45 0x00010000 164 bytes 512 bytes 1.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 65950A5BC6AB93859EB7ED3451FB0038
/57 0x00011000 72 bytes 512 bytes 0.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ DB06B8CA3DBF3279B3E424BFF73DAAD7
/70 0x00012000 108 bytes 512 bytes 1.66 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ EA76152D918FF4F1F469B2C10244D470
/81 0x00013000 338 bytes 512 bytes 3.63 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3682A6DD80E59DA0E2DC2E1E97EF4221

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware