Gridinsoft Logo
File Icon

The KC-Overlay-Windows.exe (KC-Overlay) File Analysis

Updated 3 months ago
Checked by Malaware Check
KC-Overlay-Windows.exe

Technical Analysis

File Name KC-Overlay-Windows.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.209.174
Database Version 2025-03-02 14:00:34 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
16,389,120
File Size (bytes)
2025-03-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7aaebfb05b2ca1a81ad5bbc659981efb
SHA1
b0b05d8e97f26cd0bccf2044b303221cb8b752c2
SHA256
43a0a1c6ea5d46be3fd32b2c5db64476fabcebd1ca95097d4a447d01d7764957
SHA512
5a668c6c4aec66f02d4ce11d0c604d92783236eff46d804c130e7a1ca3c4d8322b9fd802971452a69c258c03407599efd807fac45c0bac484aeb0683b30ccc21
ImpHash
d49ef54b46bd5ca3e9f4f2628efa1a3d

PE Analysis

Basic Information

▼
Icon
Hash: b313cafecdcc7f77829ce5d5dbd4607b
Fuzzy: 28cdbeb2da6a61e294d060c90481f361
dHash: aac6e8e8ecc4caa2
Image Base 0x140000000
Entry Point 0x140a65728
Compilation Time 2025-02-25 22:15:29
Checksum 0x00000000 (Actual: 0x00faec50)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path KC_Overlay.pdb
Digital Signature No valid SignedData structure was found.
Imports 18 libraries
Exports 0 functions
Resources 3 Resources
Sections 7 Sections

Version Information

▼
FileDescription KC-Overlay
FileVersion 0.7.0
ProductName KC-Overlay
ProductVersion 0.7.0
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 11,265,920 bytes 11,266,048 bytes 6.30 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 1DF23081213C264B3CAD9FC0529F0535
.rdata 0x00ac0000 4,679,448 bytes 4,679,680 bytes 6.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F7DB8C97D64741EE5F3D5363D773B22E
.data 0x00f37000 22,328 bytes 16,896 bytes 0.65 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1744F2461B6E76C69925184B01CA3A67
.pdata 0x00f3d000 355,764 bytes 355,840 bytes 6.54 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 58D5A1EF25F0B5B6BCC43D1354180B80
.fptable 0x00f94000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x00f95000 11,528 bytes 11,776 bytes 7.61 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2749704F08F69D017937623B01DC9552
.reloc 0x00f98000 56,948 bytes 57,344 bytes 5.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ CFBB162CA821636A931E1BCCC9F8D5BB
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 3 (11,278 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 10,826 bytes
96%
RT_GROUP_ICON 1 20 bytes
0.2%
RT_VERSION 1 432 bytes
3.8%

Certificate Chain Analysis

▼
Certificate Information
Product KC-Overlay
Description KC-Overlay
File Version 0.7.0

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware