Gridinsoft Logo
File Icon

The lwserver64.exe File Analysis

Updated 11 minutes ago
Checked by Malware Check
lwserver64.exe

Technical Analysis

File Name lwserver64.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.218.174
Database Version 2025-06-17 18:00:24 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
1,775,640
File Size (bytes)
2025-06-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
c7332b97de061aeafc1d4a96cab1048a
SHA1
900c5985eddfdf60a8351d01e41e2abe1c0a1cd4
SHA256
409caad367dec33116d112e6a0da4f909dab67683c7928a1aa2f6fff6cb7fded
SHA512
934e3e47d7da63edae70c47a209324c4ed9e41defc02d71b66a5b545a39720a41077256b5bb7ae6eea28f3b8e278c98fcf45db6eee49d98acb02a17e9b0a2538
ImpHash
5ec670e1e920f5a6c46293834ec5b7cc

PE Analysis

Basic Information

▼
Icon
Hash: 07f975e163b43b03663678486ed3b562
Fuzzy: fb9453b1055c9e1e0c69c451dd93d580
dHash: e8b6b2d8e8a6a6d8
Image Base 0x140000000
Entry Point 0x1400459bc
Compilation Time 2023-03-15 04:57:05
Checksum 0x001bed8d (Actual: 0x001bed15)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path E:\Ygx2019\trunk\bin\lwserver64.pdb
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 12 libraries
Exports 0 functions
Resources 7 Resources
Sections 6 Sections

Version Information

▼
FileVersion 2023.4.15.16768
ProductVersion 2023.4.15.16768
Translation 0x0804 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,233,464 bytes 1,233,920 bytes 6.42 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 701E0974AF30C7B320DA3C497084E905
.rdata 0x0012f000 382,388 bytes 382,464 bytes 4.88 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 69385E5165A1D5179F9ABF832792E8AA
.data 0x0018d000 40,924 bytes 27,648 bytes 4.52 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 881E64904F48F3F67FB107C0D8C717C7
.pdata 0x00197000 62,232 bytes 62,464 bytes 6.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0231C87B10758DBA789B242DADEF82EF
.rsrc 0x001a7000 41,032 bytes 41,472 bytes 7.51 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FAA8F48F54B4082FC45C9D0B04993740
.reloc 0x001b2000 9,096 bytes 9,216 bytes 5.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 984E5440454545DACD23837C581E7E74
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 7 (40,578 bytes)
Resource Type Count Total Size Percentage
RT_ICON 4 39,511 bytes
97.4%
RT_GROUP_ICON 1 62 bytes
0.2%
RT_VERSION 1 352 bytes
0.9%
RT_MANIFEST 1 653 bytes
1.6%

Certificate Chain Analysis

▼
Certificate Information
File Version 2023.4.15.16768
Signing Date 05:12 AM 03/15/2023 (825 days ago)
Verification Status The digital signature of the object did not verify.
Signers Chengdu Lingwo Networking Technology Co., Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2022 - 2; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Certificate Chain Summary
Microsoft Authenticode(tm) Root Authority #1 Primary
Validity Period: 1995-01-01 08:00:01 → 1999-12-31 23:59:59
Signature Algorithm: md5RSA
Serial Number: 01
Microsoft Root Authority #2 Chain
Validity Period: 1997-01-10 07:00:00 → 2020-12-31 07:00:00
Signature Algorithm: md5RSA
Serial Number: C1 00 8B 3C 3C 88 11 D1 3E F6 63 EC DF 40
DigiCert Assured ID Root CA #3 Chain
Validity Period: 2011-04-15 19:41:37 → 2021-04-15 19:51:37
Signature Algorithm: sha1RSA
Serial Number: 61 1C B2 8A 00 00 00 00 00 26
Microsoft Root Certificate Authority #4 Chain
Validity Period: 2001-05-09 23:19:22 → 2021-05-09 23:28:13
Signature Algorithm: sha1RSA
Serial Number: 79 AD 16 A1 4A A0 A5 AD 4C 73 58 F4 07 13 2E 65
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #5 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Microsoft Code Verification Root #6 Chain
Validity Period: 2005-11-01 13:46:46 → 2025-11-01 13:54:03
Signature Algorithm: sha1RSA
Serial Number: 72 94 04 10 1F 3E 0C A3 47 83 7F CA 17 5A 84 38
Chengdu Lingwo Networking Technology Co., Ltd. #7 Chain
Validity Period: 2022-01-22 00:00:00 → 2025-01-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C C3 76 CB 74 CE 2C 9D 76 7E 93 74 93 44 D4 F4
DigiCert Timestamp 2022 - 2 #8 Chain
Validity Period: 2022-09-21 00:00:00 → 2033-11-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 4D 69 72 4B 94 FA 3C 2A 4A 3D 29 07 80 3D 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #9 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #10 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware