File Name | screenshotsmaker-1.0.14.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.178.174 |
Database Version | 2024-06-03 23:00:31 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
20b429a985f01421985cdbfef1af08c9
|
|
SHA1 |
2556dce8813a43fb36e78e9e33135073da418e9b
|
|
SHA256 |
439b818f116bffcf06d59d25a159f380f9cf218f678819d3e30970abf6daaf4b
|
|
SHA512 |
d3e9db34ab0235cba21815cfbd593b44296368e7d7e3cbba83c4ace01895a98770c429b831a214b9fd518e77d55b4aeb22d36d55731d7213f28fa5a64b30ffc8
|
|
ImpHash |
945b38293d63de197023e59f28a06bb8
|
Icon |
Hash: 88f05ea6c8d8a4845731c6d1991fa68b
Fuzzy: c98f96d6ffe5af8d4eb0870c1dc20826 dHash: b2e1b496a6cada72 |
Image Base | 0x00400000 |
Entry Point | 0x0042e1fd |
Compilation Time | 2017-07-13 01:56:28 |
Checksum | 0x00000000 (Actual: 0x004f2a4b) |
OS Version | 5.1 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
PDB Path | C:\agent\_work\8\s\build\ship\x86\burn.pdb |
Digital Signature | The PE file does not contain a certificate table. |
Imports |
8 libraries
ADVAPI32, USER32, OLEAUT32, GDI32, SHELL32, ole32, KERNEL32, RPCRT4 |
Exports | 0 functions |
Resources | 5 Resources |
Sections | 7 Sections |
CompanyName | Faifly |
FileDescription | Scrnli |
FileVersion | 1.0.0 |
InternalName | setup |
LegalCopyright | Copyright (c) Faifly. All rights reserved. |
OriginalFilename | Bundler.exe |
ProductName | Scrnli |
ProductVersion | 1.0.0 |
Translation | 0x0409 0x04e4 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
301,671 bytes | 302,080 bytes | 6.56 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
E5CE29CF67E11F1BE25A7B850840179C |
.rdata |
0x0004b000 |
126,040 bytes | 126,464 bytes | 5.11 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
532107AF7A1AC182B185124745838E24 |
.data |
0x0006a000 |
5,936 bytes | 2,560 bytes | 3.15 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
7DFB613B52FD85BF38FE5B511A5C8A45 |
.wixburn |
0x0006c000 |
56 bytes | 512 bytes | 0.58 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
1CB5067747076B1E026084C9DC0142E1 |
.tls |
0x0006d000 |
9 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x0006e000 |
14,848 bytes | 14,848 bytes | 5.46 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
18F85D7E395AE1F348CB1AFF488F32E3 |
.reloc |
0x00072000 |
15,852 bytes | 15,872 bytes | 6.79 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
FC54A2A395E76F9522235AF68E156024 |
2 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 1 | 2,216 bytes | |
RT_MESSAGETABLE | 1 | 10,304 bytes | |
RT_GROUP_ICON | 1 | 20 bytes | |
RT_VERSION | 1 | 696 bytes | |
RT_MANIFEST | 1 | 1,234 bytes |
Product | Scrnli |
Description | Scrnli |
File Version | 1.0.0 |
Original Name | Bundler.exe |
Internal Name | setup |
Copyright | Copyright (c) Faifly. All rights reserved. |
✓ This file has been digitally signed and the certificate chain has been verified
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important