Gridinsoft Logo
File Icon

The win-lide300-1_2-n_mcd.exe File Analysis

Updated 21 days ago
Checked by Malaware Check
win-lide300-1_2-n_mcd.exe

Technical Analysis

File Name win-lide300-1_2-n_mcd.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-17 08:00:25 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
20,772,984
File Size (bytes)
2025-05-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e2255f5e35f1e41d45fea97e38181cad
SHA1
48593e3d7ed0e336e90911b1a7943afb161659fa
SHA256
6cd975f8b8554c56c59082d137188b37dd7b17103c85b66c40e783e5768eb37c
SHA512
1094fc2d4fffe358e3025a84efb2ea47cddcb83e884b20a39d47d6008acfe5c614ff7f39a4db0aaefc10dd9cb1f4bcca6083e4e2dc1bfedbce18870619c8a09c
ImpHash
1353b98c8e38f7bc7142e9e4de5c8b46

PE Analysis

Basic Information

▼
Icon
Hash: 8ca6a0769bbf84ae1a57a213aed71abe
Fuzzy: 4f37207b341491994cdf9d0dbc7be09a
dHash: c4dedadececcd849
Image Base 0x00400000
Entry Point 0x00414bdf
Compilation Time 2009-11-02 20:23:17
Checksum 0x013dd0b9 (Actual: 0x013dd0b9)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 6 libraries
SHELL32, USER32, KERNEL32, GDI32, COMCTL32, ADVAPI32
Exports 0 functions
Resources 23 Resources
Sections 5 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 148,318 bytes 151,552 bytes 6.60 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E5E08C1BF29516F79F30AFDA604F6D4B
.rdata 0x00026000 27,492 bytes 28,672 bytes 4.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E044F73F7CC069A25CFB1EDE062ED59A
.data 0x0002d000 67,228 bytes 8,192 bytes 3.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 21FB0522CFF098C873A30E1D72DAF54D
.rsrc 0x0003e000 40,124 bytes 40,960 bytes 5.53 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CEF93FF46F03E40AE80E748BD8F76457
_winzip_ 0x00048000 20,529,152 bytes 20,529,152 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 18F7B3E6BC7B3A2093C473B86015A4EF
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 23 (38,788 bytes)
Resource Type Count Total Size Percentage
WZ_MANIFEST 1 1,503 bytes
3.9%
RT_ICON 9 25,064 bytes
64.6%
RT_DIALOG 2 1,040 bytes
2.7%
RT_STRING 9 9,546 bytes
24.6%
RT_GROUP_ICON 1 132 bytes
0.3%
RT_MANIFEST 1 1,503 bytes
3.9%

Certificate Chain Analysis

▼
Certificate Information
Signing Date 02:30 AM 11/06/2024 (213 days ago)
Verification Status Signed
Signers Canon Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Canon Inc. #2 Chain
Validity Period: 2024-09-17 00:00:00 → 2025-09-17 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 06 61 56 60 1A 37 7C 91 9B 42 07 B2 C4 C0 5A 08
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware