Gridinsoft Logo

The Barotrauma-Save-Decompressor.exe (Barotrauma-Save-Decompressor-Backend-Form) File Analysis

Technical Analysis

File Name Barotrauma-Save-Decompressor.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.248.174
Database Version 2026-06-17 23:00:13 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
67,429,788
File Size (bytes)
2026-06-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
bb78d80536509914bc1df92ca095ad3a
SHA1
2770f64799dbdc5f45cc6b60a33f76238687b6c9
SHA256
2f2708d892f638ffb43839874fbd13f24e82c95c08e6b87ddcf4c6b0debf8974
SHA512
54981c642768af5e6002da84649f6d9860a6e25eca603f64abb007050b1949287f19a783b9a18bdd60b0b67336af831b1efd3896a5e107759ef673bd70656e95
ImpHash
698fa83da166edb916866ef085b426d9

PE Analysis

Basic Information

Image Base 0x140000000
Entry Point 0x1405a0480
Compilation Time 2022-03-14 16:50:03
Checksum 0x00000000 (Actual: 0x0405aba6)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb
Digital Signature No valid SignedData structure was found.
Imports 17 libraries
Exports 4 functions
Resources 5 Resources
Sections 10 Sections

Version Information

Translation 0x0000 0x04b0
Comments
CompanyName HP Inc.
FileDescription Barotrauma-Save-Decompressor-Backend-Form
FileVersion 1.0.0.0
InternalName Barotrauma-Save-Decompressor.dll
LegalCopyright Copyright © HP Inc. 2020
LegalTrademarks
OriginalFilename Barotrauma-Save-Decompressor.dll
ProductName Barotrauma-Save-Decompressor-Backend-Form
ProductVersion 1.0.0.0
Assembly Version 1.0.0.0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 6,269,148 bytes 6,269,440 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 21763DB6DB3DF11ADD10E6C4D68E985F
.CLR_UEF 0x005fc000 271 bytes 512 bytes 3.64 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 395F7E72BF4279153030B71F6F4A2E38
.rdata 0x005fd000 1,530,858 bytes 1,530,880 bytes 5.64 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 680D8F8B21C6FDBB7F3CE4835E4FDBCA
.data 0x00773000 123,152 bytes 28,672 bytes 3.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 23A36913CF7BFF5727F8325429A13FA9
.pdata 0x00792000 219,732 bytes 220,160 bytes 6.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 573BDD539E50C5AB0F5DA5A764B064B3
.didat 0x007c8000 24 bytes 512 bytes 0.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9D660FAA91FD6E166E51A339E9DBF22F
Section 0x007c9000 8 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
_RDATA 0x007ca000 78,600 bytes 78,848 bytes 5.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2772EFD9D58C1F6525D1290513C9CCA5
.rsrc 0x007de000 1,324,688 bytes 1,325,056 bytes 6.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6C10C59A0FD25A35C37674356C1D337F
.reloc 0x00922000 28,872 bytes 29,184 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 7D67A752C6B19114AC75532CA10C3DF4

Resource Analysis

Total Resources: 5 (1,324,198 bytes)
Resource Type Count Total Size Percentage
RT_RCDATA 3 1,322,676 bytes
99.9%
RT_VERSION 1 1,032 bytes
0.1%
RT_MANIFEST 1 490 bytes
0%

Certificate Chain Analysis

Certificate Information
Product Barotrauma-Save-Decompressor-Backend-Form
Description Barotrauma-Save-Decompressor-Backend-Form
File Version 1.0.0.0
Original Name Barotrauma-Save-Decompressor.dll
Internal Name Barotrauma-Save-Decompressor.dll
Copyright Copyright © HP Inc. 2020
Certificate Chain Summary
Microsoft Corporation #1 Primary
Validity Period: 2021-09-02 18:25:59 → 2022-09-01 18:25:59
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 04 3A 75 E5 2F 9E 0B 29 98 1E 00 00 00 00 04 3A
Microsoft Code Signing PCA 2010 #2 Chain
Validity Period: 2010-07-06 20:40:17 → 2025-07-06 20:50:17
Signature Algorithm: sha256RSA
Serial Number: 61 0C 52 4C 00 00 00 00 00 03
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2021-12-02 19:05:19 → 2023-02-28 19:05:19
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 9D FE 89 E5 F9 7B BB 4C C0 00 01 00 00 01 9D
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. 1
    Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
  2. 2
    Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
  3. 3
    Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
  4. 4
    Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
This file looks clean right now, but that doesn't mean you should let your guard down. New malware appears daily, and even legit files can be compromised after download. When in doubt, verify the source and check for a digital signature.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Portal
Signed in via Gridinsoft Portal · View profile
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware