Gridinsoft Logo

The Loader.exe File Analysis

Updated 3 minutes ago
Checked by Malware Check
Loader.exe

Technical Analysis

File Name Loader.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.220.174
Database Version 2025-07-19 13:00:25 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
5,196,800
File Size (bytes)
2025-07-19
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
6da7df57f68ec8c484a080bd1dfc61bf
SHA1
2508dd1d920878c9ecc505f800a6cd452511c424
SHA256
b78f35883bcd244a0687d2f41d125cb978f9f1054a810e608dfd6e9cdff586c6
SHA512
eeb8f14d0fcf77e5b1c348dbf499a606ae47d487f2cbaf6a6c9b4201d0577634a1757758df6661c1001f5e1be7f72ea1be202d16ec165f63562633ae0f2e34a0
ImpHash
617a1a6a7cf768a07483d8ac8bf830bf

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140007cbb
Compilation Time 2025-06-01 22:24:23
Checksum 0x00000000 (Actual: 0x0050082f)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path C:\Loader\actions-runner\_work\BenzoylmethylecgonineLoader\BenzoylmethylecgonineLoader\projects\vs2022\x64\Release\Loader.pdb
Digital Signature No valid SignedData structure was found.
Imports 11 libraries
Exports 0 functions
Resources 1 Resources
Sections 9 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 3,903,665 bytes 3,904,000 bytes 5.81 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 34C0FD38F4A6D0C6EDFFF9F2BFCAF4C0
.rdata 0x003bb000 1,062,470 bytes 1,062,912 bytes 5.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CA846BC93568162F4AE28A09C094ED43
.data 0x004bf000 60,281 bytes 20,992 bytes 3.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1BC017131A0853AFE92BF8D08CB77752
.pdata 0x004ce000 165,072 bytes 165,376 bytes 6.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 650908CD9FA50E57A187A8BBA6A209D3
.idata 0x004f7000 15,108 bytes 15,360 bytes 3.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 24723B31BADF9EB22C49A850158CA22B
.tls 0x004fb000 777 bytes 1,024 bytes 0.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C573BD7CEA296A9C5D230CA6B5AEE1A6
.00cfg 0x004fc000 373 bytes 512 bytes 0.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F6CEA03C6FC510283D3EB8C630C9D894
.rsrc 0x004fd000 1,084 bytes 1,536 bytes 2.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 18922FD6E823C35225F90B31D8D13FC1
.reloc 0x004fe000 23,738 bytes 24,064 bytes 2.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 94B7BA07AC94B81C6430DCA0A17B0BCF

Resource Analysis

▼
Total Resources: 1 (381 bytes)
Resource Type Count Total Size Percentage
RT_MANIFEST 1 381 bytes
100%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware