Gridinsoft Logo
File Icon

The SigmaGUI.exe (SigmaGUI) File Analysis

Technical Analysis

File Name SigmaGUI.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.231.174
Database Version 2025-12-20 03:00:36 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
43,360,768
File Size (bytes)
2025-12-20
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ce37aaf597ac5801b4f1c83839e882d2
SHA1
a78e909284616d7a00dca1f5513a08f2c9602d74
SHA256
c064bfdee33ea8bbc4c0c913ae1c018a1446eaae2ea79ad77a04a9a905781ccc
SHA512
76b7dddb5139e3923ccd658f87997684a9505800b675dd5c806978547e002435020df13546eb1ba048d7f0cd6fff33674d4f629b25bcc71c80436657ee63aafd
ImpHash
13987a4d86eaab73d4692d3fa2df81f2

PE Analysis

Basic Information

Icon
Hash: e2f1d6e34b6c49bdd5a0ea7d5e6fb195
Fuzzy: a5ddff4f334943542de00f89c73e1624
dHash: 9170d9b9396179fb
Image Base 0x140000000
Entry Point 0x1416ac8f4
Compilation Time 2025-12-14 19:25:53
Checksum 0x00000000 (Actual: 0x0295c685)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 39 libraries
Exports 0 functions
Resources 4 Resources
Sections 11 Sections

Version Information

CompanyName Mr Sigma
FileDescription SigmaGUI
FileVersion 1.0.0
InternalName SigmaGUI
OriginalFilename Sigma.exe
ProductName SigmaGUI
ProductVersion 1.0.0
LegalCopyright discord.gg/pubslounge
Translation 0x0402 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 24,071,350 bytes 24,071,680 bytes 6.59 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 8A084748D44E2ACEC68E1B4E9C33EDA5
.rdata 0x016f6000 16,632,012 bytes 16,632,320 bytes 6.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 208121FF8D49C8F327E768361CFCE498
.data 0x026d3000 1,297,744 bytes 1,080,832 bytes 4.66 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C46FED052DE99DB5A67F8552BBB34DDF
.pdata 0x02810000 1,203,720 bytes 1,204,224 bytes 6.88 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3D93B04AA8329495E6EDB34CC98AFFE3
.fptable 0x02936000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.tls 0x02937000 865 bytes 1,024 bytes 0.09 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 11362238BEFA7497787B9BF75059F1EF
_RDATA 0x02938000 500 bytes 512 bytes 4.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FDE93B30DC5B7A0989F7D2ADAD02F420
malloc_h 0x02939000 1,705 bytes 2,048 bytes 5.87 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ EB9221EA8F1592B0242065BF4FE646F4
protodes 0x0293a000 15,616 bytes 15,872 bytes 5.65 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8D344C04301A65E6D99D7B30467CCFA0
.rsrc 0x0293e000 61,160 bytes 61,440 bytes 7.92 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4C83A28DA68C4CD9360C3416ABA71441
.reloc 0x0294d000 289,028 bytes 289,280 bytes 5.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ F394FD197FD6D56825BA929AADDAC79A
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 4 (60,812 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 59,797 bytes
98.3%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 672 bytes
1.1%
RT_MANIFEST 1 323 bytes
0.5%

Certificate Chain Analysis

Certificate Information
Product SigmaGUI
Description SigmaGUI
File Version 1.0.0
Original Name Sigma.exe
Internal Name SigmaGUI
Copyright discord.gg/pubslounge

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware