| File Name | RR (1) (1).exe |
| File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
| Scanner Version | 1.0.228.174 |
| Database Version | 2025-10-22 23:00:17 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
a3fcb66a1e9e306ca1712e43cfb7f69e
|
|
| SHA1 |
4c1818b4a8ad2832a2dd4c0e02205f6c7a951293
|
|
| SHA256 |
7f1995b4d1988de0064b7c435c9b30aa1d7ae141bfc801f43fbd91bf269d47ce
|
|
| SHA512 |
d3d8d67ebc5f2a730eda4745cf404cff9ab07bd5d196ed962670a50fde7e5b5eee1fd53a0debfda94ed3bbb0a8153071865f304b0d41dcf3cc8cee03abd9cbbb
|
|
| ImpHash |
0e54a0d5e38565c0b7afb2f71c96e16c
|
| Image Base | 0x140000000 |
| Entry Point | 0x140001960 |
| Compilation Time | 2025-02-12 11:08:12 |
| Checksum | 0x00000000 (Actual: 0x000237a9) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB Path | C:\Users\MrTime\Downloads\kvjj\zig-cache\o\2372f10643cc8aea09dce94233dd5a4a\kvjj.pdb |
| Digital Signature | No valid SignedData structure was found. |
| Imports |
6 libraries
GDI32, USER32, KERNEL32, SHELL32, ADVAPI32, msvcrt |
| Exports | 0 functions |
| Resources | 0 Resources |
| Sections | 7 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
65,430 bytes | 65,536 bytes | 6.50 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
2C24C2955448D546304FAA4623A188B5 |
.rdata |
0x00011000 |
9,524 bytes | 9,728 bytes | 5.15 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
1A0DCA183BC4B980DA8956CD24A5A3E2 |
.buildid |
0x00014000 |
137 bytes | 512 bytes | 2.05 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
EC88077B7BF4CC96DAA8D107F404FD6F |
.data |
0x00015000 |
6,976 bytes | 512 bytes | 1.03 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
F4BCDC936B1AE782D9FF9F27BEF8C986 |
.pdata |
0x00017000 |
3,468 bytes | 3,584 bytes | 4.69 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
B5C0BA5F1A5991D80BB1195332E26153 |
.tls |
0x00018000 |
16 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.reloc |
0x00019000 |
120 bytes | 512 bytes | 1.71 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
29F54498F7681DA7D04BA8B048E10EE5 |
1 section(s) with elevated entropy (≥6.5) - possible compression
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!