The keju boxedQHPQJM exe windows程序 File Malware Analysis
Gridinsoft Logo
File Icon

The keju_boxedQHPQJM.exe File Analysis

Updated 5 months ago
Checked by Malware Check
keju_boxedQHPQJM.exe

Technical Analysis

File Name keju_boxedQHPQJM.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.218.174
Database Version 2025-06-22 18:00:26 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
64,753,328
File Size (bytes)
2025-06-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d33989d281dc83041bf576015b923aad
SHA1
cf146c6c30a7e5bbc6e6dd52adbb19114a1ebacb
SHA256
c06e28b2126773c3f9f6c0a6a1544bb99c8516d7023b8c67f6b6ac8d2ea11407
SHA512
23ed8c7f8b0b98739a6176d768762a4c52eca710dcdb8396ccd4838cfe257aa45d2bc5ad5cef0c7314fb37458b62a09d784ad932df00a3e470c9a02dad739ba3
ImpHash
d8094487f32eaeb330750a33e3ce422d

PE Analysis

Basic Information

▼
Icon
Hash: eff0fe0a1b90b1f08a9df71947385b01
Fuzzy: 6f5efd4fe44f4500d49b662d95cef0e9
dHash: f096939292d6d471
Image Base 0x00400000
Entry Point 0x019a5499
Compilation Time 2023-07-31 02:08:22
Checksum 0x00000000 (Actual: 0x03dc21af)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 19 libraries
Exports 0 functions
Resources 8 Resources
Sections 7 Sections

Version Information

▼
FileVersion 1.0.0.0
FileDescription windows程序
ProductName windows程序
ProductVersion 1.0.0.0
CompanyName windows程序
LegalCopyright windows程序
Comments windows程序
Translation 0x0804 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,387,206 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.rdata 0x00154000 4,807,142 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.data 0x005ea000 651,370 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.vmp0 0x0068a000 6,957,363 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.vmp1 0x00d2d000 8,887,264 bytes 8,888,320 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B444CF93DCDD3D0405AF4DD28777B78A
.reloc 0x015a7000 268 bytes 4,096 bytes 0.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9274136E7FD1A274EE6B2D3C9F610546
.rsrc 0x015a8000 70,529 bytes 73,728 bytes 3.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FF41E65387DAE3A00B4FC5512EAE5ADC
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 8 (70,005 bytes)
Resource Type Count Total Size Percentage
RT_ICON 3 68,664 bytes
98.1%
RT_GROUP_ICON 3 60 bytes
0.1%
RT_VERSION 1 584 bytes
0.8%
RT_MANIFEST 1 697 bytes
1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware