Gridinsoft Logo

The Wordfish-3.10-011125.exe File Analysis

Technical Analysis

File Name Wordfish-3.10-011125.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.228.174
Database Version 2025-11-06 14:00:30 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
80,907,264
File Size (bytes)
2025-11-06
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
29ce766c974f15fa4d8b24db93558a99
SHA1
28a48cbf2a06638a395254cafa0d8fd38aa883e1
SHA256
7448b27b18dc2be48903b094b04bbf8deff4ea59934ba493d3ca99ca0fbe6459
SHA512
1da15ca246ecc65912cc3e01ca75d40005d702134edfb539e1023c124bfda19289a1d6a2e3f3aaab47d2643d510ec4143aa1668b012e5d57f0795710165d16e7
ImpHash
4eb80d1562ff445bbae3e5e0621dc753

PE Analysis

Basic Information

Image Base 0x140000000
Entry Point 0x140055750
Compilation Time 2025-11-03 19:15:52
Checksum 0x00000000 (Actual: 0x04d37f83)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 14 libraries
Exports 0 functions
Resources 0 Resources
Sections 15 Sections

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,252,790 bytes 1,252,864 bytes 6.46 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 4F3FA277CA7DE0E0685071CBD2FD1179
.rdata 0x00133000 259,912 bytes 260,096 bytes 6.09 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5DBA4EAD0270B8C76BAC59DD4BF545DA
.buildid 0x00173000 53 bytes 512 bytes 0.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4A4DEAB4F0E002B83783307D91743E93
.data 0x00174000 1,147,576 bytes 1,536 bytes 2.54 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CB28904AD5258EC987AC5A57F5AE18C7
.pdata 0x0028d000 33,024 bytes 33,280 bytes 6.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1EE14F3054DCE9CD54B17A5A4BF9D44B
.rodata 0x00296000 78,354,640 bytes 78,354,944 bytes 6.73 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 040952F6A9490853824AF2B4BD60BD70
.tls 0x04d50000 1,224 bytes 1,536 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 53E979547D8C2EA86560AC45DE08AE25
.reloc 0x04d51000 8,784 bytes 9,216 bytes 5.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 08453CB54DAE31E58A91CBB0833CFB26
/4 0x04d54000 20,345 bytes 20,480 bytes 4.69 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 67CD92DFEFAAC9F3B16F2A6CD6C334DA
/18 0x04d59000 48 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 29895596641EA6A033449C87913A8C0B
/58 0x04d5a000 100,957 bytes 101,376 bytes 5.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 30E39184CB04C7E9D8C4A4E302EA9E90
/70 0x04d73000 67,681 bytes 68,096 bytes 5.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E7D82EE02E93434CB1E35425F88F7F0D
/82 0x04d84000 185,054 bytes 185,344 bytes 2.79 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 34A05E9EF6D2318CE93823AA8B2F96E2
/33 0x04db2000 13,008 bytes 13,312 bytes 1.93 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D3D9E5110D56CFD41228269101806AE1
/47 0x04db6000 39,789 bytes 39,936 bytes 5.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 0BDFB6B3D42581030F4AA424A8A9D3B7
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware