File Name | Unconfirmed 812996.crdownload |
File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
Scanner Version | 1.0.216.174 |
Database Version | 2025-05-14 12:00:23 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
9335853c3299966b85d5957054ad37c1
|
|
SHA1 |
261fc3ff0feb1fe1e456111233197d742ef52b29
|
|
SHA256 |
55a238a744904c033b8707a5aea8fb871ba019ee46c639432b45267a6076154e
|
|
SHA512 |
ee60157110c05998355a6256034c939d4c1af78263ecfc0dabc9f723c80d5391ecda650beedf6dfbb52f6b1f0e0f13b2c73d704ca74bcea0b853314426f8015d
|
|
ImpHash |
9f83a3f8df2ae4114c0dd77b162f6aee
|
Image Base | 0x140000000 |
Entry Point | 0x14003b5b0 |
Compilation Time | 2006-06-05 16:06:23 |
Checksum | 0x00000000 (Actual: 0x0060fcab) |
OS Version | 6.0 |
PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
PDB Path | msiwrapper.pdb |
Digital Signature | No valid SignedData structure was found. |
Imports |
6 libraries
ole32, msi, USER32, SHLWAPI, SHELL32, KERNEL32 |
Exports | 0 functions |
Resources | 11 Resources |
Sections | 5 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
392,172 bytes | 392,192 bytes | 6.00 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
0FCDA598F0D5B6AA7A8EEA52896F7A8C |
.rdata |
0x00061000 |
161,882 bytes | 162,304 bytes | 4.85 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
47223C81DCAF0AB4B205C86F546AF4F4 |
.data |
0x00089000 |
13,964 bytes | 7,168 bytes | 3.47 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
DFFD68566B419749911D79A5F008AC63 |
.pdata |
0x0008d000 |
30,048 bytes | 30,208 bytes | 5.74 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
6AD6802FBF9ADB13AC310AF024837A6C |
.rsrc |
0x00095000 |
1,034,381,376 bytes | 1,034,381,824 bytes | 7.99 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
19E74B90A6690F98B7C54534AEEFAA34 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 6 | 111,571 bytes | |
RT_RCDATA | 2 | 1,034,267,402 bytes | |
RT_GROUP_ICON | 1 | 90 bytes | |
RT_VERSION | 2 | 1,656 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important