| File Name | CbtLFantasticFacts-32.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Scanner Version | 1.0.228.174 |
| Database Version | 2025-10-29 15:00:26 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
dbef66440c3a2bc7776da06f2a490e65
|
|
| SHA1 |
2cca162145a6d0ccd1bb0b3664de6ca6f11d62b9
|
|
| SHA256 |
6ac6d622d99cd8182ab435991a36eeea4e3a09811cd5ec2b0383fcb3d31c16f9
|
|
| SHA512 |
b2a79e6a7c9730b4aebaab40584f4535fa476f19c54b616a75a5308fba3a189df88088d39b58cecdc098795fff3aab5d70abdb677743f5e60ef189821068e070
|
|
| ImpHash |
6f0f72e12bdea21b3a946ca4036df56c
|
| Icon |
Hash: e79d589387274e97fdeb6dd16b944cdf
Fuzzy: 9769dd12794599d045c5083e4e5a6539 dHash: 71f8f8aaa4b4d870 |
| Image Base | 0x00400000 |
| Entry Point | 0x004014a0 |
| Compilation Time | 2021-07-31 21:59:47 |
| Checksum | 0x00021f58 (Actual: 0x00021f58) |
| OS Version | 4.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Digital Signature | No valid SignedData structure was found. |
| Imports | 12 libraries |
| Exports | 0 functions |
| Resources | 6 Resources |
| Sections | 8 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
7,940 bytes | 8,192 bytes | 6.00 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_16BYTES
|
1CF5AE5EADC7C1D71F72BB5390488EF0 |
.data |
0x00003000 |
120 bytes | 512 bytes | 1.34 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES
|
8347CB31105176C23BEF031C1B15417D |
.rdata |
0x00004000 |
1,744 bytes | 2,048 bytes | 4.76 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES
|
CB90300356C29BCC12FB843BE53621E7 |
.bss |
0x00005000 |
1,008 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x00006000 |
2,728 bytes | 3,072 bytes | 4.35 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES
|
66AA60D1E5ABDC08361F728F8011A4E7 |
.CRT |
0x00007000 |
52 bytes | 512 bytes | 0.27 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES
|
F5162AC0C440A3B119BF2874A30B5641 |
.tls |
0x00008000 |
8 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x00009000 |
100,020 bytes | 100,352 bytes | 4.77 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES
|
EF437497539D3DE690B8505B409D263F |
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 5 | 99,592 bytes | |
| RT_GROUP_ICON | 1 | 76 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!