File Name | CloudCheck.exe |
File Type |
Win32 EXE
|
Magic Bytes | PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows |
SSDEEP Hash |
49152:kwUJewPxCrMlyV5dIlrcqtLYh7GbxzIklR/Hymibmhc9KqtpOlHJ7SwoLbPhSzf:kw2gCLYhukI
|
Scanner Version | 1.0.144.174 |
Database Version | 2023-10-24 23:02:14 UTC |
Detected by 9 security engines - requires caution
Hash Type | Value | Action |
---|---|---|
MD5 |
1384bd7bb45e7b7298788ecad20cc6c9
|
|
SHA1 |
684254f4ef54f34aed449905759ec238194f7087
|
|
SHA256 |
91d7d387c8d1cac4ead0a0613e1dd505dd49a43083f759bd843bb936a502b4a8
|
|
SHA512 |
6e1f23235c23799b1c407b1fcda0602cb8e966b120d09d81b88c96c2be18aedb20af24246aa6948adf690d18acbda01e9f7a1afc8b9ca6ccb791f32cfdf7724c
|
|
ImpHash |
489c6e87495e62f21e8bc92d686aff0a
|
Icon |
Hash: 0ac87766c287a801382ee73316d8be80
Fuzzy: ed85d16c48562a0f5f95c2100c341775 dHash: 488671e0bc3b4000 |
Image Base | 0x00400000 |
Entry Point | 0x00407420 |
Compilation Time | 2023-06-27 14:17:44 |
Checksum | 0x007039e5 (Actual: 0x00703a3a) |
OS Version | 6.0 |
PEiD Signatures |
PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
|
Digital Signature | OK |
Imports | 12 libraries |
Exports | 4 functions |
Resources | 65 Resources |
Sections | 12 Sections |
DigiCert Assured ID Root CA | DigiCert Inc (US) |
DigiCert Trusted Root G4 | DigiCert, Inc. (US) |
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA | DigiCert, Inc. (US) |
Certum Trusted Network CA 2 | Asseco Data Systems S.A. (PL) |
Certum Extended Validation Code Signing 2021 CA | HardestCodesEst OU (EE) |
Translation | 0x0000 0x04b0 |
CompanyName | Cloudflare |
FileDescription | Cloudflare WARP |
FileVersion | 2023.3.450.0 |
InternalName | Cloudflare WARP.dll |
LegalCopyright | (c) 2021, Cloudflare Inc. |
OriginalFilename | Cloudflare WARP.dll |
ProductName | Cloudflare WARP |
ProductVersion | 2023.3.450.0 |
Assembly Version | 2023.3.450.0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
3,385,376 bytes | 3,385,856 bytes | 6.10 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
BC66140323D70E9D6FD574F41C7194DD |
.rodata |
0x0033c000 |
2,176,128 bytes | 2,176,512 bytes | 4.49 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
FB39862E277FED534C95D626C3B29B74 |
.data |
0x00550000 |
343,052 bytes | 133,632 bytes | 3.30 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
592C03A9AE63C4166A651F6A8542BD52 |
.tls |
0x005a4000 |
2,176 bytes | 2,560 bytes | 0.17 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
7594DEA0EE9B197D945BFCCE7E4CEFDF |
.pdata |
0x005a5000 |
325,788 bytes | 326,144 bytes | 6.32 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
69D1D77F8D80B85FDC7915F9A1D64464 |
.xdata |
0x005f5000 |
573,088 bytes | 573,440 bytes | 4.49 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
7B5F15E2C8854B100B295ECB56F81E49 |
.rdata |
0x00681000 |
40 bytes | 512 bytes | 0.22 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
0DF590C0DE69D104726A946BE89788A5 |
.idata |
0x00682000 |
21,137 bytes | 21,504 bytes | 4.23 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
94B0EA381FE34ACBA171080E37EEB64B |
.didata |
0x00688000 |
7,164 bytes | 7,168 bytes | 3.93 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
08CA55519D8937C7860039473ABB6EC6 |
.edata |
0x0068a000 |
148 bytes | 512 bytes | 1.82 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
EE8F30CD9A4BB00C6CE20E5775B625A9 |
.rsrc |
0x0068b000 |
397,568 bytes | 397,824 bytes | 3.10 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
3CEAF385704E2A53234CA08A48720E05 |
.reloc |
0x006ed000 |
249,900 bytes | 250,368 bytes | 6.52 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
688F3603B76E4A5DE559B4DBE1AE7456 |
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_CURSOR | 7 | 2,156 bytes | |
RT_ICON | 8 | 292,192 bytes | |
RT_STRING | 34 | 33,008 bytes | |
RT_RCDATA | 6 | 63,170 bytes | |
RT_GROUP_CURSOR | 7 | 140 bytes | |
RT_GROUP_ICON | 1 | 118 bytes | |
RT_VERSION | 1 | 842 bytes | |
RT_MANIFEST | 1 | 2,480 bytes |
Subject |
DigiCert Trusted Root G4 DigiCert Inc US |
Issuer | DigiCert Assured ID Root CA |
Serial Number | 19414496059604725969669510860671817818 |
Subject |
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert, Inc. US |
Issuer | DigiCert Trusted Root G4 |
Serial Number | 9586110043380832440035821245782711899 |
Subject |
DigiCert Timestamp 2023 DigiCert, Inc. US |
Issuer | DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA |
Serial Number | 7002784885422699301467740558332354838 |
Subject |
Certum Extended Validation Code Signing 2021 CA Asseco Data Systems S.A. PL |
Issuer | Certum Trusted Network CA 2 |
Serial Number | 249815938466542622099996912406279490697 |
Subject |
HardestCodesEst OU HardestCodesEst OU EE |
Issuer | Certum Extended Validation Code Signing 2021 CA |
Serial Number | 136527893090990648282165591053443111781 |
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important