| File Name | 1-鬼畜风暴3号.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Scanner Version | 1.0.232.174 |
| Database Version | 2026-01-08 07:00:18 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
2b67f5a95df08c709993abd4a4564361
|
|
| SHA1 |
9502c4f96f961406f6ecc058f5271b44a49d4b3d
|
|
| SHA256 |
a138cc13688ca171d4c1b5107d082ec18f80cc6f11ab221fddf94b630209e0a9
|
|
| SHA512 |
f296e1c7b28ff47faa9dfb623a2a6e8fc5a90b0e2f87ed86d551543b211162317f3a60968f475c4f5a810913cb1e620e8637ffb81a67d2cdd6660b47698755e9
|
|
| ImpHash |
0894255e4cf0d4151571a98081646938
|
| Icon |
Hash: 44c1d441bf508406fdef676bcfddab38
Fuzzy: 78f26236c7c5544b1410a4096e0d4332 dHash: 80c8ececececc880 |
| Image Base | 0x00400000 |
| Entry Point | 0x00475114 |
| Compilation Time | 2026-01-07 14:06:18 |
| Checksum | 0x00000000 (Actual: 0x0119d724) |
| OS Version | 4.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| Digital Signature | No valid SignedData structure was found. |
| Imports | 12 libraries |
| Exports | 0 functions |
| Resources | 55 Resources |
| Sections | 4 Sections |
| FileVersion | 1.0.0.0 |
| FileDescription | 鬼畜风暴3号 |
| ProductName | 鬼畜风暴3号 |
| ProductVersion | 1.0.0.0 |
| CompanyName | 溯风 |
| LegalCopyright | 溯风 版权所有 |
| Comments | 鬼畜风暴3号 |
| Translation | 0x0804 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
605,626 bytes | 606,208 bytes | 6.63 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
F2B5A3818F8ED0D50EFF8433047765C7 |
.rdata |
0x00095000 |
17,674,884 bytes | 17,678,336 bytes | 7.75 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
2D7471486D09059FEDC986D5F9227513 |
.data |
0x01171000 |
304,170 bytes | 98,304 bytes | 5.06 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
B73CBD94BCE1EF1D3E49058D5EBA6A28 |
.rsrc |
0x011bc000 |
23,740 bytes | 24,576 bytes | 5.47 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
1163C820C555E0E596700856652E8A09 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
1 section(s) with elevated entropy (≥6.5) - possible compression
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| TEXTINCLUDE | 3 | 370 bytes | |
| RT_CURSOR | 4 | 1,104 bytes | |
| RT_BITMAP | 14 | 6,040 bytes | |
| RT_ICON | 3 | 4,729 bytes | |
| RT_MENU | 2 | 656 bytes | |
| RT_DIALOG | 10 | 4,418 bytes | |
| RT_STRING | 11 | 2,268 bytes | |
| RT_GROUP_CURSOR | 3 | 74 bytes | |
| RT_GROUP_ICON | 3 | 60 bytes | |
| RT_VERSION | 1 | 556 bytes | |
| RT_MANIFEST | 1 | 461 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!