Gridinsoft Logo
File Icon

The OBS录制伴侣v4.8.9.exe File Analysis

Technical Analysis

File Name OBS录制伴侣v4.8.9.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.231.174
Database Version 2025-12-30 10:00:32 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
47,291,788
File Size (bytes)
2025-12-30
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
8521441834861093b147b3a7636511fb
SHA1
fc84093156280d2414c2af0416e6ac80603e46d7
SHA256
55e992e1c788513d38521f29cae8b0adc47b234d7ee7225029ace963f4002c50
SHA512
d99b705f356346b34f807a623821f75af5ed8016e584cf072a7f8f7c5de47eb5f8c879513b224f0446184f2992533710478677fd6e2b78706c241146bc0a287a
ImpHash
dcaf48c1f10b0efa0a4472200f3850ed

PE Analysis

Basic Information

Icon
Hash: 2068f85fb143784d24babf48ba880fd6
Fuzzy: 914c37864ceeda4084283e270f2c5bb7
dHash: 4bb6130b2b6bc62d
Image Base 0x140000000
Entry Point 0x14000da30
Compilation Time 2025-11-12 12:07:44
Checksum 0x02d1e27b (Actual: 0x02d1e27b)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 5 libraries
USER32, COMCTL32, KERNEL32, ADVAPI32, GDI32
Exports 0 functions
Resources 9 Resources
Sections 7 Sections

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 179,584 bytes 179,712 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 588E5055FB224A048E508395BF048644
.rdata 0x0002d000 80,136 bytes 80,384 bytes 5.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F8E7F7AC2BB5930B2ED546E541939650
.data 0x00041000 20,656 bytes 3,584 bytes 1.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 2FC88032C47AD8E77BA50142B1D7BACB
.pdata 0x00047000 9,204 bytes 9,216 bytes 5.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F27272E31CD3260DD36A304BC13F6042
.fptable 0x0004a000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0004b000 104,852 bytes 104,960 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A6F1E94BAF7E31CB0E6A97869EA32464
.reloc 0x00065000 1,908 bytes 2,048 bytes 5.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 7B4C05B51855F1FC0294EBFB2AE73776
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

Total Resources: 9 (104,314 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 102,917 bytes
98.7%
RT_GROUP_ICON 1 104 bytes
0.1%
RT_MANIFEST 1 1,293 bytes
1.2%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware