File Name | zadig-2.9.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
|
Scanner Version | 1.0.220.174 |
Database Version | 2025-07-14 08:00:23 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
780c870c02706aa64ab00d3fc0bfef43
|
|
SHA1 |
15fd0655b6e1324cada7444a0f2f0b8820784bed
|
|
SHA256 |
4ecaa95df3da3621486a043aef8b3050b8bafe7c901402871e816229ef82039b
|
|
SHA512 |
9a408f80535120cb5b6f8c8025c9d10a4cf20d1f0468d8a61fd3871e84a332c17cd473a615139bebb4b6c92a4043a45f4059a8813c5328857c4cd85757b35d3b
|
|
ImpHash |
a3c4d4840ddbd6df726ef17eb6453f19
|
Icon |
Hash: 6d6a760a9f282538d812a769921f158a
Fuzzy: 54583bbba09ea1fade8ef18d94a3b401 dHash: aa1f63d531614763 |
Image Base | 0x00400000 |
Entry Point | 0x00b24670 |
Compilation Time | 2024-06-13 12:54:27 |
Checksum | 0x00520ed8 (Actual: 0x00520ed8) |
OS Version | 6.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
|
Digital Signature | OK |
Imports |
9 libraries
ADVAPI32, GDI32, KERNEL32, ntdll, ole32, SETUPAPI, SHELL32, USER32, WININET |
Exports | 0 functions |
Resources | 20 Resources |
Sections | 3 Sections |
CompanyName | akeo.ie |
FileDescription | Zadig |
FileVersion | 2.9.788 |
InternalName | Zadig |
LegalCopyright | � 2010-2023 Pete Batard (GPL v3) |
LegalTrademarks | https://www.gnu.org/copyleft/gpl.html |
OriginalFilename | zadig.exe |
ProductName | Zadig |
ProductVersion | 2.9.788 |
Comments | https://zadig.akeo.ie |
Translation | 0x0009 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
UPX0 |
0x00001000 |
2,195,456 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
UPX1 |
0x00219000 |
5,296,128 bytes | 5,293,056 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A3F7CCD5AEF8411AC9B9AB6398785505 |
.rsrc |
0x00726000 |
32,768 bytes | 30,720 bytes | 6.23 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
8EC814EB4455F43D080316C62A912446 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_BITMAP | 1 | 57,744 bytes | |
RT_ICON | 8 | 26,560 bytes | |
RT_MENU | 2 | 954 bytes | |
RT_DIALOG | 6 | 3,692 bytes | |
RT_GROUP_ICON | 1 | 118 bytes | |
RT_VERSION | 1 | 860 bytes | |
RT_MANIFEST | 1 | 1,079 bytes |
Product | Zadig |
Description | Zadig |
File Version | 2.9.788 |
Original Name | zadig.exe |
Signing Date | 12:56 PM 06/13/2024 (395 days ago) |
Verification Status | Signed |
Signers | Akeo Consulting; Sectigo Public Code Signing CA EV R36; Sectigo Public Code Signing Root R46; Sectigo (AAA) |
Counter Signers | Symantec SHA256 TimeStamping Signer - G3; Symantec SHA256 TimeStamping CA; VeriSign Universal Root Certification Authority |
Internal Name | Zadig |
Copyright | � 2010-2023 Pete Batard (GPL v3) |
48 FC 93 B4 60 55 94 8D 36 A7 C9 8A 89 D6 94 16
33 D7 08 A8 91 40 53 19 E2 A5 BB D3 39 B9 AD 6E
BF B1 50 01 BB F5 92 D4 96 2A 77 97 EA 73 6F A3
7B 05 B1 D4 49 68 51 44 F7 C9 89 D2 9C 19 9D 12
7B D4 E5 AF BA CC 07 3F A1 01 23 04 22 41 4D 12
✓ This file has been digitally signed and the certificate chain has been verified
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important