Gridinsoft Logo

The CashContext.dll (Внешняя компонента 1С:Предприятие 8) File Analysis

Technical Analysis

File Name CashContext.dll
File Type
PE32 executable (DLL) (console) Intel 80386, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-28 13:00:16 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
4,985,344
File Size (bytes)
2025-05-28
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
f30d93dfb07090ca0ec2891e7cc6815c
SHA1
92bddd611d1d275d9b4a98cb579b7bd491b38d52
SHA256
2d64950354e9d0f6af6ce4a6ea7d0e9922187b4c6441639994082e46b2a6278d
SHA512
5d864894529cb44a65881063442ac5d898df5647f3ad0f555d4efe5ded02fb7e1eee1d8ecfafc23bb3ec9c95e1abb3a00ec8d90581cfde669ed525c545459796
ImpHash
8f84af057bdb1473321ed8205d8f558f

PE Analysis

Basic Information

Image Base 0x00400000
Entry Point 0x0084401c
Compilation Time 2025-04-03 10:30:36
Checksum 0x00000000 (Actual: 0x004ce664)
OS Version 4.0
PEiD Signatures PE32 executable (DLL) (console) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 13 libraries
Exports 21 functions
Resources 61 Resources
Sections 8 Sections

Version Information

CompanyName Штрих-М
FileDescription Внешняя компонента 1С:Предприятие 8
FileVersion 1.7.27.23
InternalName AddIn.CashContext
LegalCopyright Штрих-М
LegalTrademarks Штрих-М
OriginalFilename CashContext.dll
ProductName Защищенная компонента "Штрих-М: Кассир 5"
ProductVersion 5.1.7.27
Translation 0x0419 0x04e3

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,462,996 bytes 4,463,104 bytes 6.59 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0984A17F631427C18A14AE361BC1F3A8
.itext 0x00443000 4,156 bytes 4,608 bytes 6.02 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C70EEE052CBE3E5E82D1B40F1AF89E1F
.data 0x00445000 233,412 bytes 233,472 bytes 5.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FE5A831E9E379EDDCCDE3D703B7A9567
.bss 0x0047e000 720,968 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x0052f000 17,108 bytes 17,408 bytes 5.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 44BD4C91D04B468C86F92FB860BB7B78
.edata 0x00534000 866 bytes 1,024 bytes 4.89 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1FE312821AC36FFEDDEFE0C886FC153A
.reloc 0x00535000 222,056 bytes 222,208 bytes 6.81 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 93C116BD2C31202CBDE312768AA1DF85
.rsrc 0x0056c000 42,496 bytes 42,496 bytes 4.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A2718453D600385B0326AF0A60E07510
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 61 (36,345 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 7 2,156 bytes
5.9%
RT_BITMAP 9 8,050 bytes
22.1%
RT_DIALOG 10 3,554 bytes
9.8%
RT_STRING 23 16,590 bytes
45.6%
RT_RCDATA 4 5,003 bytes
13.8%
RT_GROUP_CURSOR 7 140 bytes
0.4%
RT_VERSION 1 852 bytes
2.3%

Certificate Chain Analysis

Certificate Information
Product Защищенная компонента "Штрих-М: Кассир 5"
Description Внешняя компонента 1С:Предприятие 8
File Version 1.7.27.23
Original Name CashContext.dll
Internal Name AddIn.CashContext
Copyright Штрих-М

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware