| File Name | ExtensionModule.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Scanner Version | 1.0.229.174 |
| Database Version | 2025-11-19 20:00:22 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
317aef9d8588169d4952b4c90750e09e
|
|
| SHA1 |
5981f28a51fa5a64c54fe6abdd3ceff9b12743e6
|
|
| SHA256 |
ab83e8a7db66a8c53bc5df66273a6ec36fe321d65d071af6ebc9fbea75fd9235
|
|
| SHA512 |
824a6623e96cb61996cca88708f76c3c92ed368e2fb9e19083d41f2d85827fc4cce5052e1d933a0ff666563e7808543a96da405d3417fdc69290659638773c93
|
|
| ImpHash |
f4639a0b3116c2cfc71144b88a929cfd
|
| Icon |
Hash: d237e43be8b8f0ade4adfa5b248a29e9
Fuzzy: 151c64ae6b7b71998d4de15272f8477b dHash: f0f0e86969e8f0f0 |
| Image Base | 0x00400000 |
| Entry Point | 0x004034fc |
| Compilation Time | 2023-07-02 02:09:39 |
| Checksum | 0x001ae76f (Actual: 0x001ae76f) |
| OS Version | 4.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Digital Signature | OK |
| Imports |
7 libraries
ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32 |
| Exports | 0 functions |
| Resources | 51 Resources |
| Sections | 5 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
25,942 bytes | 26,112 bytes | 6.46 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
DD25E171F2E0FE45F2800CC9E162537D |
.rdata |
0x00008000 |
4,952 bytes | 5,120 bytes | 5.10 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F0B500FF912DDA10F31F36DA3EFC8A1E |
.data |
0x0000a000 |
129,848 bytes | 1,536 bytes | 4.04 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2BC02714EE74BA781D92E94EEACCB080 |
.ndata |
0x0002a000 |
98,304 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x00042000 |
23,104 bytes | 23,552 bytes | 5.14 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
86B4FAFB56C71E6409B770D9542B49B6 |
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 1 | 6,745 bytes | |
| RT_DIALOG | 48 | 12,624 bytes | |
| RT_GROUP_ICON | 1 | 20 bytes | |
| RT_MANIFEST | 1 | 1,059 bytes |
| Signing Date | 02:11 PM 06/06/2024 (582 days ago) |
| Verification Status | Signed |
| Signers | BRY TECNOLOGIA S.A; Sectigo Public Code Signing CA R36; Sectigo Public Code Signing Root R46; Sectigo (AAA) |
| Counter Signers | DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert |
48 FC 93 B4 60 55 94 8D 36 A7 C9 8A 89 D6 94 1662 1D 6D 0C 52 01 9E 3B 90 79 15 20 89 21 1C 0AB7 31 B8 B1 BB 41 32 AB BE 81 AC 2A 4C FD 49 5505 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 1607 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A✓ This file has been digitally signed and the certificate chain has been verified
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!