Gridinsoft Logo
File Icon

The ON1_Photo_RAW_MAX_2025-Fix_v1.1.exe (ON1 Photo RAW MAX 2025 Fix) File Analysis

Technical Analysis

File Name ON1_Photo_RAW_MAX_2025-Fix_v1.1.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows
SSDEEP Hash
12288:Kaxf2j5CiPS4Fdt8XVl9jdB8HCrbRPo157aQwLzC55+5pQ7:KFU0FdsVlxdiCrK15GQwLzrQ7
Scanner Version 1.0.222.174
Database Version 2025-07-29 20:00:15 UTC

Suspicious File Detected

Detected by 35 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
49%
Detection Rate
588,288
File Size (bytes)
35/72
Engines Detected
2025-07-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
fe22ebdf4085a7ea0102918629772759
SHA1
e8c68ea6a993d911301116157100227014d8a0e0
SHA256
cdacc759a856c645df6d276412eafb7a436af494287d5df308eddbd0cc99e3e0
SHA512
6b8461e72dd931a8fcd8f74ce36e5d172064eecbc00ed85ac2570642a463748b51365a21b371bfba4110bf1f20ab24f431edc07ffb6b2c1ded7d94010d501009

Security Engines with Detections (35 of 72)

Bkav
W32.Common.258A43A0 Malicious
Lionic
Adware.Win32.Generic.2!c Malicious
MicroWorld-eScan
Adware.GenericKD.61026133 Malicious
CTX
exe.trojan.generic Malicious
CAT-QuickHeal
Trojan.Ghanarava.1733288387772759 Malicious
Skyhigh
BehavesLike.Win64.Generic.hc Malicious
ALYac
Adware.GenericKD.61026133 Malicious
Malwarebytes
Malware.AI.4076510690 Malicious
Sangfor
PUP.Win32.Agent.Vys8 Malicious
Alibaba
Trojan:Win64/Genric.cfdb6255 Malicious
CrowdStrike
win/malicious_confidence_60% (W) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
APEX
Malicious Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09AL25 Malicious
Paloalto
generic.ml Malicious
BitDefender
Adware.GenericKD.61026133 Malicious
Avast
Win64:Malware-gen Malicious
Emsisoft
Adware.GenericKD.61026133 (B) Malicious
Google
Detected Malicious
VIPRE
Adware.GenericKD.61026133 Malicious
McAfeeD
ti!CDACC759A856 Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
Ikarus
PUA.PowerShell.Obfuscated Malicious
GData
Adware.GenericKD.61026133 Malicious
Varist
W64/ABApplication.HCQF-6751 Malicious
Antiy-AVL
GrayWare/Win32.Wacapew Malicious
Arcabit
Adware.Generic.D3A32F55 Malicious
ViRobot
Adware.Agent.588288.AA Malicious
Microsoft
PUA:Win32/Softcnapp Malicious
Cylance
Unsafe Malicious
Panda
Trj/Chgt.AD Malicious
TrellixENS
Artemis!FE22EBDF4085 Malicious
MaxSecure
Trojan.Malware.240029483.susgen Malicious
AVG
Win64:Malware-gen Malicious
DeepInstinct
MALICIOUS Malicious
37 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Icon
Hash: 00fc37bf9f014d1de71600e8ebe0cfe2
Fuzzy: f7977460f32d38b3fffc384e1eafd60f
dHash: 4ce4d0f0b098c8ec
Image Base 0x140000000
Entry Point 0x140000000
Compilation Time 2024-10-25 12:12:58
Checksum 0x00000000 (Actual: 0x00099f3e)
OS Version 4.0
PEiD Signatures PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 0
Exports 0 functions
Resources 10 Resources
Sections 2 Sections

Version Information

Translation 0x0000 0x04b0
FileDescription ON1 Photo RAW MAX 2025 Fix
FileVersion 1.1.0.0
InternalName on1photorawmax2025fix.exe
LegalCopyright xanax
OriginalFilename on1photorawmax2025fix.exe
ProductName ON1 Photo RAW MAX 2025
ProductVersion 1.1.0.0
Assembly Version 1.1.0.0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00002000 29,684 bytes 29,696 bytes 6.05 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ DD67249A3AE320CF0E3CFEAA9C99C69E
.rsrc 0x0000a000 557,728 bytes 558,080 bytes 7.68 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B34AB0CA508DDCCB4503D2E69F2AEB56
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

Total Resources: 10 (557,119 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 555,836 bytes
99.8%
RT_GROUP_ICON 1 104 bytes
0%
RT_VERSION 1 776 bytes
0.1%
RT_MANIFEST 1 403 bytes
0.1%

Certificate Chain Analysis

Certificate Information
Product ON1 Photo RAW MAX 2025
Description ON1 Photo RAW MAX 2025 Fix
File Version 1.1.0.0
Original Name on1photorawmax2025fix.exe
Internal Name on1photorawmax2025fix.exe
Copyright xanax

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
35 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware