File Name | secretlove_chs.exe |
File Type |
Win32 EXE
|
Magic Bytes | PE32 executable (GUI) Intel 80386, for MS Windows |
SSDEEP Hash |
49152:SOEbmBpQWxIDLRLHAl+uKZMhwSCCO0tyuGY:TEbm4WxIDLRLHn8QR0T
|
Scanner Version | 1.0.215.174 |
Database Version | 2025-04-27 22:00:21 UTC |
Detected by 39 security engines - requires caution
Hash Type | Value | Action |
---|---|---|
MD5 |
f422094b733bb924276e9ebf5040de53
|
|
SHA1 |
88b22cee3c2c75b335dff2ecde395b56b4e326b8
|
|
SHA256 |
d747d538d60f5e3876f6210c5883218e3c02397567b369b68f608e1fb3dbb40e
|
|
SHA512 |
c67b060cbdd5b741ef47a8e27ef88c868dd56c7f167b4e02938528eca7aa13a8464c9bd8311ae53b121c49e37128095e8f40ad679afdecbacf06e332f0b15ee6
|
|
ImpHash |
b462095fea3219e285e54ac0547eead6
|
Icon |
Hash: 6b4fa3cb70247f967e9d6afbfee79320
Fuzzy: 0979c9e87b2815fdbcb68d28b105c7ee dHash: f2f6e6fa7b2939b2 |
Image Base | 0x00400000 |
Entry Point | 0x00427d32 |
Compilation Time | 2024-03-26 02:29:29 |
Checksum | 0x00000000 (Actual: 0x001ef379) |
OS Version | 6.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
8 libraries
kernel32, user32, advapi32, oleaut32, ole32, ntdll, SHFolder, shlwapi |
Exports | 2 functions |
Resources | 33 Resources |
Sections | 9 Sections |
Comments | BURIKO General Interpreter uses the OggVorbis libraries. The OggVorbis libraries are Copyright (C) 1994-2002 by the Xiph.Org Foundation. < http://www.xiph.org/ > |
CompanyName | BURIKO Co.,Ltd. |
FileDescription | Ethornell - BURIKO General Interpreter |
FileVersion | Version : 1.680 - Compatibility : 1.72 |
InternalName | Ethornell |
LegalCopyright | Copyright (C) 2007-2024 BURIKO Co.,Ltd. |
LegalTrademarks | BURIKO General Interpreter |
OriginalFilename | BGI.exe |
ProductVersion | 1.0.0.0 |
Translation | 0x0411 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
1,133,556 bytes | 1,133,568 bytes | 6.56 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
1758347B883C0B4190BD5197C188E342 |
.rdata |
0x00116000 |
245,252 bytes | 245,760 bytes | 5.72 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
90F43A93D39DAD6E43B5594E644D8A28 |
.data |
0x00152000 |
425,928 bytes | 14,336 bytes | 3.71 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
51551BC4FF664720D194A64568E960CA |
_RDATA |
0x001ba000 |
1,504 bytes | 1,536 bytes | 4.68 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
3572694B6B2205862BDE5F60EAE95671 |
.rsrc |
0x001bb000 |
137,501 bytes | 137,728 bytes | 7.71 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
4D2524000957262FDAA307C1761EC29C |
.reloc |
0x001dd000 |
50,096 bytes | 50,176 bytes | 6.65 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F495CFB75268E679B298CEF81E514FF8 |
.detour |
0x001ea000 |
11,480 bytes | 11,776 bytes | 5.11 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
E92EAD51C40BFB90DDCB6061F1C25EDD |
.enigma1 |
0x001ed000 |
4,096 bytes | 118,784 bytes | 7.88 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A092A6A6A0AE9074BE1498812B782AAC |
.enigma2 |
0x001ee000 |
278,528 bytes | 278,528 bytes | 6.02 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
3B3AF4C233168A5F90CB7E62BA769673 |
2 section(s) with high entropy (≥7.5) detected - possible packing/encryption
2 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
AFX_DIALOG_LAYOUT | 3 | 6 bytes | |
SHADER | 1 | 2,174 bytes | |
TEXT | 1 | 1,489 bytes | |
RT_CURSOR | 1 | 2,220 bytes | |
RT_ICON | 5 | 118,945 bytes | |
RT_DIALOG | 17 | 7,160 bytes | |
RT_GROUP_CURSOR | 1 | 20 bytes | |
RT_GROUP_ICON | 1 | 76 bytes | |
RT_VERSION | 1 | 1,236 bytes | |
RT_MANIFEST | 1 | 1,759 bytes | |
None | 1 | 457 bytes |
Description | Ethornell - BURIKO General Interpreter |
File Version | Version : 1.680 - Compatibility : 1.72 |
Original Name | BGI.exe |
Internal Name | Ethornell |
Copyright | Copyright (C) 2007-2024 BURIKO Co.,Ltd. |
✓ This file has been digitally signed and the certificate chain has been verified
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important