Gridinsoft Logo
File Icon

The 系统启动器.exe File Analysis

Technical Analysis

File Name 系统启动器.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.227.174
Database Version 2025-10-16 07:00:17 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
219,136
File Size (bytes)
2025-10-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5b249c54f86444d7a48cfefe499a665a
SHA1
795616d9a6ed324c2eeea7499615ee9b9f2073be
SHA256
c35414ed8bd2cf98aa293f602fb32ee2b233664ae3184cf75555a9d79430fe37
SHA512
3ea91a6ed7ab5449f98f28a4130dbc55987fa2038274eaaa552bddd8acff5d8d38bd980e1a8b987ea7086d24031a65626114a7ed2b14906181e635f1480d27c5
ImpHash
bb3ac2c21e02c68abcad237dc3fa6d00

PE Analysis

Basic Information

Icon
Hash: 2223e638ccea01d88754e6664f18b70f
Fuzzy: 048f5259a9a3196da3ce78db75b855d3
dHash: d5d4d4d4dcf0c08a
Image Base 0x140000000
Entry Point 0x140011ab0
Compilation Time 2025-08-19 04:39:28
Checksum 0x00000000 (Actual: 0x0003bb69)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
Digital Signature No valid SignedData structure was found.
Imports 12 libraries
Exports 0 functions
Resources 3 Resources
Sections 6 Sections

Version Information

Translation 0x0000 0x04b0
CompanyName 系统启动器
FileDescription 系统启动器
FileVersion 1.0.0.0
InternalName 系统启动器.dll
LegalCopyright
OriginalFilename 系统启动器.dll
ProductName 系统启动器
ProductVersion 1.0.0+26bf5a008a17e51343d056ef03945f64f430a167
Assembly Version 1.0.0.0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 90,748 bytes 91,136 bytes 6.34 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3ED5512B293AA5CCB14A2730A5A29785
.rdata 0x00018000 48,414 bytes 48,640 bytes 4.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5FEA80C7FACFECC8CBCDCA53B92A2C86
.data 0x00024000 6,200 bytes 2,560 bytes 2.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 22582DC602AA44F387E703BD7355A401
.pdata 0x00026000 5,148 bytes 5,632 bytes 4.85 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C20628DE244B4AD26D738FC5023EF5C1
.reloc 0x00028000 824 bytes 1,024 bytes 4.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 37812F81534460A128D06D0D29B2CB00
.rsrc 0x00029000 68,624 bytes 69,120 bytes 4.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A00AF747003238584BBFCEED0AD56B50

Resource Analysis

Total Resources: 3 (68,392 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 67,624 bytes
98.9%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 748 bytes
1.1%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware