File Name | Sin confirmar 654561.crdownload |
File Type |
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive
|
Scanner Version | 1.0.221.174 |
Database Version | 2025-07-26 10:00:30 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
21a37228761ac6541f1a8189a3dcdd02
|
|
SHA1 |
4a3500fd51892de85cc828a7e789c9dfe691a4e8
|
|
SHA256 |
b4a4aa3fc4da7d2cc6b59e66a5f4146a93cc022b17e27940d08ba7df2f1d9a44
|
|
SHA512 |
55c5226b7a6389c884a6e361ff99e195944db8ad361f6131fb0090ff811e23d353568f2be36e9ccdf58c5fdb0458d7089730e74112686a7be550552a77886b89
|
|
ImpHash |
f4d1e4cd7416ef83f79f7c6a038875b3
|
Icon |
Hash: ededff98662a85c64089ca7bf8a7f906
Fuzzy: 06d127e552b00921f96d8446e5a454bb dHash: 71c08cf8d8dcc870 |
Image Base | 0x00400000 |
Entry Point | 0x0040440a |
Compilation Time | 2024-04-29 12:07:21 |
Checksum | 0x00000000 (Actual: 0x00c3692a) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive
|
Digital Signature | No valid SignedData structure was found. |
Imports |
7 libraries
ADVAPI32, COMCTL32, GDI32, KERNEL32, ole32, SHELL32, USER32 |
Exports | 0 functions |
Resources | 17 Resources |
Sections | 7 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
36,996 bytes | 37,376 bytes | 6.15 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
8A8223C30B12AFEB35A5AB2DC239DC2D |
.data |
0x0000b000 |
232 bytes | 512 bytes | 1.56 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
8E7689BA14C090FBE0197D672920AA29 |
.rdata |
0x0000c000 |
51,052 bytes | 51,200 bytes | 7.29 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
9E851FE3FFCC2DBD1FBB27FD28D2DB43 |
.bss |
0x00019000 |
172,864 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x00044000 |
5,040 bytes | 5,120 bytes | 5.33 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
1BA0727CB072C0D85579D47C2FB029C7 |
.ndata |
0x00046000 |
69,632 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x00057000 |
19,664 bytes | 19,968 bytes | 5.75 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
54134E6674E28ADDDC5FD5AFAF1FDFB1 |
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_BITMAP | 1 | 1,638 bytes | |
RT_ICON | 7 | 13,784 bytes | |
RT_DIALOG | 7 | 2,092 bytes | |
RT_GROUP_ICON | 1 | 104 bytes | |
RT_MANIFEST | 1 | 1,072 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important