| File Name | PonyMisMatch.exe |
| File Type |
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
| Scanner Version | 1.0.228.174 |
| Database Version | 2025-11-02 23:00:24 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
b08dcf92dddb1f307687ec459a2b6bee
|
|
| SHA1 |
8ca72252c3380aff72194b421f63b11375b93cbb
|
|
| SHA256 |
b4acf6b56f7dc4fedc6300f3e40a4ba5f78961eee3d452964b088c5c571bcb45
|
|
| SHA512 |
8ecfb187371fe3e3728503b9bdb4be9d4714d75a3568a78749196f934d7ba9de45975f1739a84ed95e0d64f02a67546ed0be6548cdedcc5fe68885e09a287cd4
|
|
| ImpHash |
f34d5f2d4577ed6d9ceec516c1f5a744
|
| Image Base | 0x00400000 |
| Entry Point | 0x00410f42 |
| Compilation Time | 2042-07-29 05:44:51 |
| Checksum | 0x00010f5a (Actual: 0x00010f5a) |
| OS Version | 4.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
| PDB Path | C:\Users\LC\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb |
| Digital Signature | Chain verification from CN=HPPC\\LC (serial:66812982922499356077003313485900339061, sha1:14329d663ddc4dcef486f4084e86b36d24793d3d) failed: The X.509 certificate provided is self-signed - "Common Name: HPPC\LC" |
| Imports |
1 libraries
mscoree |
| Exports | 0 functions |
| Resources | 1 Resources |
| Sections | 3 Sections |
| Translation | 0x0000 0x04b0 |
| Comments | |
| CompanyName | |
| FileDescription | WindowsFormsApp1 |
| FileVersion | 1.0.0.0 |
| InternalName | WindowsFormsApp1.exe |
| LegalCopyright | Copyright © 2025 |
| LegalTrademarks | |
| OriginalFilename | WindowsFormsApp1.exe |
| ProductName | WindowsFormsApp1 |
| ProductVersion | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00002000 |
61,256 bytes | 61,440 bytes | 7.29 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
327F293E24799C056398D530E160DBE4 |
.rsrc |
0x00012000 |
952 bytes | 1,024 bytes | 3.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
331663EA179CA00FA11A331C4862791C |
.reloc |
0x00014000 |
12 bytes | 512 bytes | 0.08 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
55D7450059E9DDA07CB3C42688EE75F6 |
1 section(s) with elevated entropy (≥6.5) - possible compression
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_VERSION | 1 | 860 bytes |
| Product | WindowsFormsApp1 |
| Description | WindowsFormsApp1 |
| File Version | 1.0.0.0 |
| Original Name | WindowsFormsApp1.exe |
| Verification Status | A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. |
| Signers | HPPC\LC |
| Internal Name | WindowsFormsApp1.exe |
| Copyright | Copyright © 2025 |
32 43 B6 63 05 27 FE 99 45 74 15 C1 E0 A2 D7 75✓ This file has been digitally signed and the certificate chain has been verified
Chain verification from CN=HPPC\\LC (serial:66812982922499356077003313485900339061, sha1:14329d663ddc4dcef486f4084e86b36d24793d3d) failed: The X.509 certificate provided is self-signed - "Common Name: HPPC\LC"
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!