Gridinsoft Logo
File Icon

The photo_2025-05-24_14-31-19.jpg.exe File Analysis

Updated 12 days ago
Checked by Malaware Check
photo_2025-05-24_14-31-19.jpg.exe

Technical Analysis

File Name photo_2025-05-24_14-31-19.jpg.exe
File Type
PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-25 13:00:16 UTC
โœ“

Clean File

No threats detected by our scanner

0%
Detection Rate
260,608
File Size (bytes)
2025-05-25
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
87b505a51c8da232cf830f5240c22ac2
SHA1
38349f54c6d683f4cbefe72bb3fe801e5dd068da
SHA256
3bf3841bba18fe785fc1840cd820e8e7da881e27f27d4b8e7f90a49c15d9f45f
SHA512
a8148a2304a81b830943512db1715311899f8a126b59db2705d74f57ec291abb74cf21355558fb13d9ab2bb2dbe0890ab0305fbd40f1e1b5e5c29a59b33d308a
ImpHash
7d297f54fcb85aa9c1632cea25248f07

PE Analysis

Basic Information

โ–ผ
Icon
Hash: d4c2bc191de37e6bfe087b54b7f956b9
Fuzzy: 7d1a46acd7714066d20a5259dcab2975
dHash: 92b4f4948cccaeb0
Image Base 0x140000000
Entry Point 0x1400013d0
Compilation Time 2025-05-24 03:14:38
Checksum 0x00041b2d (Actual: 0x00041b2d)
OS Version 4.0
PEiD Signatures PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 5 libraries
KERNEL32, msvcrt, SHELL32, urlmon, USER32
Exports 0 functions
Resources 13 Resources
Sections 10 Sections

Version Information

โ–ผ
CompanyName Wuhan WinnPro Technology Co., Ltd.
FileDescription 365็œ‹ๅ›พ็Ž‹
FileVersion 6.0.1.6
InternalName ImageViewer.exe
LegalCopyright Wuhan WinnPro Technology Co., Ltd.Copyright๏ผˆc๏ผ‰2025
ProductName 365็œ‹ๅ›พ็Ž‹
ProductVersion 6.0.1.6
Translation 0x0000 0x03a8

PE Sections

โ–ผ
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 6,720 bytes 7,168 bytes 5.80 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 1AD2DD0298F3EB4F01A22719646E610B
.data 0x00003000 144 bytes 512 bytes 0.63 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A0418F504BA5BAC61C57B1C9B41C4848
.rdata 0x00004000 1,704 bytes 2,048 bytes 3.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EDC23DB9EE43661984416E237156490D
.pdata 0x00005000 576 bytes 1,024 bytes 2.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C19793C48081469965C0A73397A41B69
.xdata 0x00006000 440 bytes 512 bytes 3.36 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 38FDFB101D8CC98C7F66842F4B934E7A
.bss 0x00007000 384 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00008000 1,900 bytes 2,048 bytes 3.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D367FADEF05B90BB044A3B0B5209BE2C
.tls 0x00009000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.reloc 0x0000a000 112 bytes 512 bytes 1.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 0273A0BC92758CFF39C3A9F142B58809
.rsrc 0x0000b000 245,096 bytes 245,248 bytes 4.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C29E2E51FB16B7DF64ABB349BBCB8653

Resource Analysis

โ–ผ
Total Resources: 13 (244,325 bytes)
Resource Type Count Total Size Percentage
RT_ICON 8 241,697 bytes
98.9%
RT_DIALOG 2 712 bytes
0.3%
RT_GROUP_ICON 1 216 bytes
0.1%
RT_VERSION 1 732 bytes
0.3%
RT_MANIFEST 1 968 bytes
0.4%

Certificate Chain Analysis

โ–ผ
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

โš  This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware