The win tr4500 1 4 n mcd exe File Malware Analysis
Gridinsoft Logo
File Icon

The win-tr4500-1_4-n_mcd.exe File Analysis

Updated 1 month ago
Checked by Malware Check
win-tr4500-1_4-n_mcd.exe

Technical Analysis

File Name win-tr4500-1_4-n_mcd.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-12-01 15:00:32 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
21,659,424
File Size (bytes)
2025-12-01
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
06c46e20199ea1aaf43abf11b02aadb3
SHA1
ccf59adf5ec68bb72aa7a5a24010765321646e24
SHA256
b0fd30e428d357ecf1ee429312616df2d38d54214ac1905508ce56e771bb1a1b
SHA512
8f7cbc94df421c204fee99dd8421f4c630eff16bc343698a0b20ec45ca7111b5a187132af6e87d6c19a52ae843199830b7bca22832f3e9db77c24a26ba8def4d
ImpHash
1353b98c8e38f7bc7142e9e4de5c8b46

PE Analysis

Basic Information

▼
Icon
Hash: 8ca6a0769bbf84ae1a57a213aed71abe
Fuzzy: 4f37207b341491994cdf9d0dbc7be09a
dHash: c4dedadececcd849
Image Base 0x00400000
Entry Point 0x00414bdf
Compilation Time 2009-11-02 20:23:17
Checksum 0x014b1ab3 (Actual: 0x014b1ab3)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 6 libraries
SHELL32, USER32, KERNEL32, GDI32, COMCTL32, ADVAPI32
Exports 0 functions
Resources 23 Resources
Sections 5 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 148,318 bytes 151,552 bytes 6.60 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E5E08C1BF29516F79F30AFDA604F6D4B
.rdata 0x00026000 27,492 bytes 28,672 bytes 4.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E044F73F7CC069A25CFB1EDE062ED59A
.data 0x0002d000 67,228 bytes 8,192 bytes 3.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F6BC56DABE45EBBAFFA444AEC296607F
.rsrc 0x0003e000 40,124 bytes 40,960 bytes 5.53 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CEF93FF46F03E40AE80E748BD8F76457
_winzip_ 0x00048000 21,417,984 bytes 21,417,984 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E500F7182B6B2309F84BB4FA307A4F52
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 23 (38,788 bytes)
Resource Type Count Total Size Percentage
WZ_MANIFEST 1 1,503 bytes
3.9%
RT_ICON 9 25,064 bytes
64.6%
RT_DIALOG 2 1,040 bytes
2.7%
RT_STRING 9 9,546 bytes
24.6%
RT_GROUP_ICON 1 132 bytes
0.3%
RT_MANIFEST 1 1,503 bytes
3.9%

Certificate Chain Analysis

▼
Certificate Information
Signing Date 02:43 AM 07/05/2023 (918 days ago)
Verification Status Signed
Signers Canon Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Symantec SHA256 TimeStamping Signer - G3; Symantec SHA256 TimeStamping CA; VeriSign Universal Root Certification Authority
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Canon Inc. #2 Chain
Validity Period: 2023-02-03 00:00:00 → 2024-03-09 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0F 4C 7E 4D C7 18 62 AC DC 0C 43 62 05 A8 A1 24
Symantec SHA256 TimeStamping CA #3 Chain
Validity Period: 2016-01-12 00:00:00 → 2031-01-11 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B 05 B1 D4 49 68 51 44 F7 C9 89 D2 9C 19 9D 12
Symantec SHA256 TimeStamping Signer - G3 #4 Chain
Validity Period: 2017-12-23 00:00:00 → 2029-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B D4 E5 AF BA CC 07 3F A1 01 23 04 22 41 4D 12

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware