| File Name | DotNetZip-3y33n0kb.tmp |
| File Type |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Scanner Version | 1.0.228.174 |
| Database Version | 2025-11-03 10:00:23 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
d043e175098972c13e4ef0b167f60840
|
|
| SHA1 |
0c44485983bb42610b86b4d12910bd759dc5ec84
|
|
| SHA256 |
3a9b534d9c3d2497a38e797fade380a739913fd4553c2d0786b5dcfb3d6e9416
|
|
| SHA512 |
80a4fb35d61971fa8eb522c084fb0ea14775f2e8756db1413b7a1f7da40a30fc3796f9c2ceb9e6fa10517a2958af7deb306c7859907486e817d1208bc884af8f
|
|
| ImpHash |
e025ac0f4f86e79d5a7102730da5fbb9
|
| Image Base | 0x10000000 |
| Entry Point | 0x106ee6aa |
| Compilation Time | 2025-10-10 02:31:40 |
| Checksum | 0x00a4d3de (Actual: 0x00a4d3de) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| PDB Path | D:\work-oy\source\cs1.6\GlobalArrayExtension\build\windows\x86\releasedbg\MAE_Protect.pdb |
| Digital Signature | OK |
| Imports | 11 libraries |
| Exports | 3 functions |
| Resources | 0 Resources |
| Sections | 8 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
1,425,938 bytes | 1,426,432 bytes | 6.75 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
D0282C68E720489E8ED960B5B55B03C6 |
.rdata |
0x0015e000 |
774,542 bytes | 774,656 bytes | 5.70 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E4C7345D625982516C1E7E3F8B73D895 |
.data |
0x0021c000 |
279,816 bytes | 245,760 bytes | 1.68 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
DF698A6741785501FBAD6EA1E75C31CC |
.fptable |
0x00261000 |
128 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.@*p |
0x00262000 |
4,270,442 bytes | 4,270,592 bytes | 7.73 (Packed/Encrypted) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
170E7E292401B353A545067467E244E0 |
.gt} |
0x00675000 |
1,504 bytes | 1,536 bytes | 0.38 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A13F7501B7B1FDAC474825E940C45B4C |
.,(y |
0x00676000 |
3,940,464 bytes | 3,940,864 bytes | 7.74 (Packed/Encrypted) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
0E2E6BAC3842A9F532BA8967E11D7A30 |
.reloc |
0x00a39000 |
68,048 bytes | 68,096 bytes | 6.56 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
2F3EB93AE3CD06982327A3EB7C84CCE6 |
2 section(s) with high entropy (≥7.5) detected - possible packing/encryption
2 section(s) with elevated entropy (≥6.5) - possible compression
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!