File Name | dec.exe |
File Type |
PE32 executable (console) Intel 80386, for MS Windows
|
Scanner Version | 1.0.222.174 |
Database Version | 2025-08-01 02:00:17 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
d513e2d33234f4bed5a7ff46f7e010b3
|
|
SHA1 |
7e9aedaf7a77aefe4e9b9d604f34d2d42cec52a7
|
|
SHA256 |
9297a500407b77687c537f7d7453a1a4180e4362c806f23b67dee4f7461a6c2b
|
|
SHA512 |
2320a1c84e9b463a80fe555dddc2ce3e198c891b22b7f71f300bdcdf20eb1ce65bead610920cb22845a16e1d00a6b1aff22fc0511a8d5cf6771bc6d4096834c5
|
|
ImpHash |
6e6c603b02b006cff1bb39b8023cd294
|
Image Base | 0x00400000 |
Entry Point | 0x0041b410 |
Compilation Time | 2010-03-29 08:13:40 |
Checksum | 0x0004dacc (Actual: 0x0004dacc) |
OS Version | 5.0 |
PEiD Signatures |
PE32 executable (console) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
2 libraries
WINMM, KERNEL32 |
Exports | 0 functions |
Resources | 1 Resources |
Sections | 4 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
189,412 bytes | 189,440 bytes | 6.76 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
E6679891433972EC1C41BDC12DDD22A2 |
.rdata |
0x00030000 |
109,414 bytes | 109,568 bytes | 6.52 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DA5DC8C1F019AEFD5C2FCBA11708AB2B |
.data |
0x0004b000 |
14,820 bytes | 7,168 bytes | 4.32 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
83E903B14534270A451D3C4E58A2A2F9 |
.rsrc |
0x0004f000 |
436 bytes | 512 bytes | 5.11 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DAD272BF5A58A5BA1483DDBAA70CCB85 |
2 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_MANIFEST | 1 | 346 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important