File Name | g.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.217.174 |
Database Version | 2025-05-23 00:00:12 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
75b5dd3f5d317fb1e8cc27526990fab4
|
|
SHA1 |
b112ff60801df7f213678c1a79a4823723bea5f5
|
|
SHA256 |
911a3c20cb14e8337c8720c1cfb3894789cd63cc8d62fb870792d3be202aa33c
|
|
SHA512 |
62ed53858737d2eac4e9c51a3ebb226120c30e908228ef581400c4f03ac611f0c3e3e0cba0e216b6286b259ff6af5ed003ab988aa029e9004c91225b6e1014c8
|
|
ImpHash |
a50ced768c5f04d6254d0dd623a1eab5
|
Icon |
Hash: 59dbff3337e22b4a7476339aebea24b1
Fuzzy: 53acba083d5891c6d23b442b4582b4b8 dHash: aad4a2d4aad492d4 |
Image Base | 0x00400000 |
Entry Point | 0x0046905c |
Compilation Time | 1992-06-19 22:22:17 |
Checksum | 0x000888c8 (Actual: 0x00485624) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
9 libraries
kernel32, user32, advapi32, oleaut32, gdi32, ole32, comctl32, shell32, SHFolder |
Exports | 0 functions |
Resources | 68 Resources |
Sections | 8 Sections |
CompanyName | |
FileDescription | |
FileVersion | 4.0.3.0 |
InternalName | |
LegalCopyright | |
LegalTrademarks | |
OriginalFilename | |
ProductName | |
ProductVersion | 1.0.0.0 |
Comments | |
Translation | 0x0409 0x04e4 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
CODE |
0x00001000 |
426,448 bytes | 426,496 bytes | 6.55 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
BB7A95EBCE148BF2C6BD3D2392669FBC |
DATA |
0x0006a000 |
5,348 bytes | 5,632 bytes | 4.22 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
801D12DE694F6FC70C06AF4CCF55BBD2 |
BSS |
0x0006c000 |
3,821 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x0006d000 |
10,034 bytes | 10,240 bytes | 5.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BEF6A3FFAFE891E03B5772DD080043C6 |
.tls |
0x00070000 |
16 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rdata |
0x00071000 |
24 bytes | 512 bytes | 0.16 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
6F4B6E1F199EC76870D997C445678511 |
.reloc |
0x00072000 |
29,760 bytes | 30,208 bytes | 6.65 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
A019F2D2D0A2383CB0A93D4AF7EAC620 |
.rsrc |
0x0007a000 |
53,592 bytes | 53,760 bytes | 5.22 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
E97474672F9FB443880131A25CCA6791 |
2 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_CURSOR | 7 | 2,156 bytes | |
RT_BITMAP | 22 | 7,196 bytes | |
RT_ICON | 6 | 22,384 bytes | |
RT_DIALOG | 1 | 82 bytes | |
RT_STRING | 17 | 14,644 bytes | |
RT_RCDATA | 5 | 1,709 bytes | |
RT_GROUP_CURSOR | 7 | 140 bytes | |
RT_GROUP_ICON | 1 | 90 bytes | |
RT_VERSION | 1 | 628 bytes | |
RT_MANIFEST | 1 | 483 bytes |
File Version | 4.0.3.0 |
00
38 25 D7 FA F8 61 AF 9E F4 90 E7 26 B5 D6 5A D5
47 BF 19 95 DF 8D 52 46 43 F7 DB 6D 48 0D 31 A4
65 52 26 E1 B2 2E 18 E1 59 0F 29 85 AC 22 E7 5C
4D 4E DD 77 06 EF 6B 31 31 D0 0B 1C 67 91 D0 C1
✓ This file has been digitally signed and the certificate chain has been verified
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important