The Paranoid Checker v5 4 8 exe File Malware Analysis

Technical Analysis

File Name	Paranoid Checker v5.4.8.exe
File Type	PE32+ executable (console) x86-64, for MS Windows
Scanner Version	1.0.217.174
Database Version	2025-05-23 04:00:31 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	a1a614c25cabaf0035c116d1c206349b
SHA1	f841f9f99eb44373893910734987496ae456502a
SHA256	1fe6cc76a1eb05db423c33631e482c5b3a926e23ba0b882eea69f567ea61ffd4
SHA512	d24c157360d431640ff3651ccfe2b1de043661dad8a7ccd1cac687492381bd5982c75c984340f9d61948b75dbb41ad900c108e95202fa8b5ad10313b54784dfb
ImpHash	3642c4ad9797c59f810541c9ea7d8d9a

PE Analysis

Basic Information

▼

Image Base	`0x140000000`
Entry Point	`0x14004c950`
Compilation Time	2025-05-20 16:35:48
Checksum	0x00000000 (Actual: 0x00137107)
OS Version	6.0
PEiD Signatures	`PE32+ executable (console) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	1 libraries KERNEL32
Exports	0 functions
Resources	0 Resources
Sections	11 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	454,454 bytes	454,656 bytes	6.89 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AECA8FC992063FADBC1FF3A8800BA591`
`.rdata`	`0x00070000`	63,732 bytes	64,000 bytes	4.93 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1A724F804872FB0CCFC85AF4233B5722`
`.data`	`0x00080000`	15,672 bytes	5,120 bytes	2.81 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2321DA0C4E0F7FC306B7587F87FF4309`
`.pdata`	`0x00084000`	11,364 bytes	11,776 bytes	5.62 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8512F3C6D33E73E366EFE7DE1BD116A6`
`.gxfg`	`0x00087000`	8,512 bytes	8,704 bytes	5.12 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2C22266ABBA498035A491B8856BE886E`
`.retplne`	`0x0008a000`	140 bytes	512 bytes	1.05 (Normal)	`0x00000000`	`8C950F651287CBC1296BCB4E8CD7E990`
`.tls`	`0x0008b000`	9 bytes	512 bytes	0.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`1F354D76203061BFDD5A53DAE48D5435`
`_RDATA`	`0x0008c000`	500 bytes	512 bytes	4.20 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A8CAC3AF02096C47491980EE7CB51B86`
`.reloc`	`0x0008d000`	2,532 bytes	2,560 bytes	5.42 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`3BFF9F02D0BC9F0590A568C06F251063`
`.bss`	`0x0008e000`	361,472 bytes	361,472 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3B252AC58270D7C57A902254C52B543E`
`.bss`	`0x000e7000`	361,472 bytes	361,472 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3B252AC58270D7C57A902254C52B543E`

Entropy Analysis Alert

2 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The Paranoid Checker v5.4.8.exe File Analysis