Gridinsoft Logo
File Icon

The witcher.exe (The Witcher) File Analysis

Updated 2 months ago
Checked by Malaware Check
witcher.exe

Technical Analysis

File Name witcher.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.211.174
Database Version 2025-03-22 16:00:42 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
9,879,224
File Size (bytes)
2025-03-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
9cd9fd5880b2be2b6ce9bca1834dddf6
SHA1
9be4cdbc6ef0e6a394d600a1dac275480e1c2ed4
SHA256
7304dd28aae48797e41d41b162af951d0ee90f8b4345f530d49a38ddece92b4f
SHA512
f7fb0ec37fde914fbd3161cfd9818ccba68b7d2d5e309eae33ac0ac5909e21836b361cad47fa5723b87efdb1616be16525219d721221e8aa896a5c9af5d82dc7
ImpHash
279ed7c39052cbeef1fc0cba7e9bf87c

PE Analysis

Basic Information

▼
Icon
Hash: 93651ee0975b26f2c7019cfe630453dd
Fuzzy: 01f11661edddab15f89b459c74e5ad98
dHash: b2ecfad8b2d6f031
Image Base 0x00400000
Entry Point 0x009edb94
Compilation Time 2008-11-04 13:00:12
Checksum 0x00975096 (Actual: 0x00975096)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path c:\NeverwinterNights\NWN\Game-NWMain_Release.pdb
Digital Signature OK
Imports 22 libraries
Exports 2 functions
Resources 251 Resources
Sections 5 Sections

Version Information

▼
Comments The Witcher
CompanyName CD Projekt Red
FileDescription The Witcher
FileVersion 1.5.0.1304
InternalName The Witcher
LegalCopyright Copyright © 2007 CD Projekt Red
OriginalFilename witcher.exe
PrivateBuild [Plus] 1.4.5.1304 (11/04/08 13:51:26)
ProductName The Witcher
ProductVersion 1.5.0.1304
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 7,591,130 bytes 7,593,984 bytes 6.59 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7B0B9E39A39AE181A4AD5FB6FC61BFD5
.rdata 0x0073f000 953,423 bytes 954,368 bytes 5.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1DAC34BB4F26796E5CFCF189DCBA6313
.data 0x00828000 5,880,648 bytes 167,936 bytes 5.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 663EEAC2849F49AF7906CBB876D3C93D
.rsrc 0x00dc4000 638,828 bytes 638,976 bytes 6.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5F13D72859A315DBDB8D54A4B59793CA
.reloc 0x00e60000 512,046 bytes 516,096 bytes 5.77 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2CF71B562EB70D37EC5236069BD5FAC8
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 251 (626,594 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 114 369,808 bytes
59%
RT_ICON 19 252,672 bytes
40.3%
RT_GROUP_CURSOR 114 2,280 bytes
0.4%
RT_GROUP_ICON 2 278 bytes
0%
RT_VERSION 1 912 bytes
0.1%
RT_MANIFEST 1 644 bytes
0.1%

Certificate Chain Analysis

▼
Certificate Information
Product The Witcher
Description The Witcher
File Version 1.5.0.1304
Original Name witcher.exe
Signing Date 02:31 PM 07/06/2009 (5813 days ago)
Verification Status Signed
Signers CD Projekt RED Sp. z o.o.; Certum Level III; Certum
Counter Signers Certum Time-Stamping Authority; Certum
Internal Name The Witcher
Copyright Copyright © 2007 CD Projekt Red
Certificate Chain Summary
Certum Level III #1 Primary
Validity Period: 2002-07-12 16:32:17 → 2012-07-12 16:32:17
Signature Algorithm: sha1RSA
Serial Number: 01 00 23
Certum Time-Stamping Authority #2 Chain
Validity Period: 2009-03-03 12:58:15 → 2024-03-03 12:58:15
Signature Algorithm: sha1RSA
Serial Number: 04 7A 55
CD Projekt RED Sp. z o.o. #3 Chain
Validity Period: 2008-08-11 14:55:59 → 2009-08-11 14:55:59
Signature Algorithm: sha1RSA
Serial Number: 04 48 51

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware