Gridinsoft Logo
File Icon

The Office Installer+.exe File Analysis

Technical Analysis

File Name Office Installer+.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-05 12:00:24 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
10,901,504
File Size (bytes)
2025-03-05
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
74bd276fecb69602374d85ff2142d386
SHA1
11cb98ca2482a0f06b8a66db435c02013fc89013
SHA256
3174fea793f078da0d05a1cbf2823ad27ffe32fb4795461830281b0447621f48
SHA512
b444d2e99a54576c25c881ec60dccbde01ef1ece51745a5db75cb8955ca74c978b565ea0be67c5f1581f456ab026efdc3c1aed0ad65e6427023a377682d151ff
ImpHash
3679a00aea2cc977baada7b81e521ced

PE Analysis

Basic Information

Icon
Hash: 391f811855bf0bc99d7dd2e6c27b6f80
Fuzzy: 99819d86401a69c8b8715607db9d5222
dHash: 70e4868c8ce6f870
Image Base 0x140000000
Entry Point 0x1401840ac
Compilation Time 2025-03-05 02:30:24
Checksum 0x00a66340 (Actual: 0x00a66340)
OS Version 5.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 13 libraries
Exports 0 functions
Resources 7 Resources
Sections 9 Sections

Version Information

Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,590,262 bytes 1,590,272 bytes 6.37 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 86CDF0EEC0D94C13A7AC910F10FBAE06
.rdata 0x00186000 266,100 bytes 266,240 bytes 5.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 19CBF4C9EE89306FD90840426A339AC8
.data 0x001c7000 9,207,992 bytes 8,696,320 bytes 7.36 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E7E8FE9B3B992EE689826D18BE2179DE
.pdata 0x00a90000 41,352 bytes 41,472 bytes 6.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AFA758FAD331B3DCC841B17C4320B219
.gxfg 0x00a9b000 11,008 bytes 11,264 bytes 5.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BCEC4E0C85719FCD1466C7AE51353303
.modplug 0x00a9e000 20,480 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
_RDATA 0x00aa3000 348 bytes 512 bytes 3.51 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0577AD35E1BC7C60942700A7B7C805AC
.rsrc 0x00aa4000 290,320 bytes 290,816 bytes 4.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EB484A699F1FDFBBEA6D0307A7BD82AD
.reloc 0x00aeb000 3,168 bytes 3,584 bytes 5.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 1E59834A46E3199B20E11C1E6B30E33D
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 7 (289,863 bytes)
Resource Type Count Total Size Percentage
RT_ICON 4 285,408 bytes
98.5%
RT_GROUP_ICON 1 62 bytes
0%
RT_VERSION 1 220 bytes
0.1%
RT_MANIFEST 1 4,173 bytes
1.4%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware