The libnettle 8 dll File Malware Analysis
Gridinsoft Logo

The libnettle-8.dll File Analysis

Updated 8 months ago
Checked by Malware Check
libnettle-8.dll

Technical Analysis

File Name libnettle-8.dll
File Type
PE32 executable (DLL) (console) Intel 80386, for MS Windows
Scanner Version 1.0.213.174
Database Version 2025-04-13 03:00:33 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
10,033,352
File Size (bytes)
2025-04-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4337b72b1b6e0557fb7a5d9343b63637
SHA1
401bd14438f32245779204eff0cb1dc239f5c550
SHA256
7259664aa70af52b15c9f5874509c31b43946d21c3a3dfef2bec4fe3075fa2da
SHA512
b84a7b7a83b7c6d01c69cb13061912a99719bbedb2242ef69c0332b95fe1cff969931c2793b5fa464a2630fdf8ce6b4a359c7e1b1c29f82ae962eabb68b36a31
ImpHash
ec4838d1380d082a7cd6698f3928f28a

PE Analysis

Basic Information

▼
Image Base 0x68a40000
Entry Point 0x68a4121a
Compilation Time 2023-07-02 20:48:28
Checksum 0x0099a3ab (Actual: 0x0099a3ab)
OS Version 4.0
PEiD Signatures PE32 executable (DLL) (console) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 3 libraries
KERNEL32, ucrtbase, libgcc_s_dw2-1
Exports 562 functions
Resources 0 Resources
Sections 20 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 184,244 bytes 184,320 bytes 6.37 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 2C9FDF1A0F5C3FD980E3D03A0458A0C1
.data 0x0002e000 100 bytes 512 bytes 1.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D6728E4F513488C7FB7FC3028AC5A665
.rdata 0x0002f000 85,952 bytes 86,016 bytes 7.26 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 47742439BD55D6A6DD3484A37658CCC6
/4 0x00044000 30,076 bytes 30,208 bytes 4.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0FB2017EF8DD844F7A285F87775DF5F7
.bss 0x0004c000 140 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.edata 0x0004d000 18,970 bytes 19,456 bytes 5.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 92DD5EB2929C9B433F363D035D143165
.idata 0x00052000 1,612 bytes 2,048 bytes 4.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 8E702BFE3DA7A130EF280E298D68621F
.CRT 0x00053000 44 bytes 512 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 989A7B0DB7B5DFFB4E79FDE13DC90B2E
.tls 0x00054000 8 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.reloc 0x00055000 4,944 bytes 5,120 bytes 6.57 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 1E2C5C840DD12ADD9EB5B1A9F02A9E9B
/14 0x00057000 7,440 bytes 7,680 bytes 2.86 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 1621B13B0B7B859C000822EFB4D04C94
/29 0x00059000 338,479 bytes 338,944 bytes 5.65 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ BBC76D076E71BF448EC9D403F7FDC912
/41 0x000ac000 78,460 bytes 78,848 bytes 4.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2D32ECAA909939017F068A103D01A670
/55 0x000c0000 145,086 bytes 145,408 bytes 5.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ F06E6DE7AF3DA396BE3617DDEF67ED03
/67 0x000e4000 56 bytes 512 bytes 0.70 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 0BEE46952CB1977A920BCF608ED3C28B
/80 0x000e5000 1,605 bytes 2,048 bytes 4.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 93F7AF1925E3B8C866856DDC4DAE86A2
/91 0x000e6000 185,171 bytes 185,344 bytes 4.88 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 07131756721E7E7E71F2332BBD943362
/107 0x00114000 214,058 bytes 214,528 bytes 6.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 77FE06438A28D85490F29940B23765A1
/123 0x00149000 8,549,527 bytes 8,549,888 bytes 5.66 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 7AF9B794A917EC988F8E47E552A677D7
/136 0x00971000 7,974 bytes 8,192 bytes 5.70 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D06B5CF44732343255F1227AFE4C6733
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware