File Name | mcmdlogger-neo.exe |
File Type |
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
|
Scanner Version | 1.0.167.174 |
Database Version | 2024-02-25 16:00:20 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
d3b70fa0711ad4e8e8a43e8a4ba6cdfb
|
|
SHA1 |
64b2e064abcee7b04caccd315a2d2994ba4df125
|
|
SHA256 |
da298b13fc28e0a326de0138130584201e0b6dd4859e74615781e48c099010a8
|
|
SHA512 |
4a564a51fe2d44645df6651804581c429b560f111190a585ce6508572ecba72b21ecf47e5763ec65500453cd2498519e9c55ec96a94b8c560b81520398346aff
|
|
ImpHash |
65892a964106b5e0c6c363fdf21975eb
|
Image Base | 0x00400000 |
Entry Point | 0x0046f140 |
Compilation Time | 1970-01-01 00:00:00 |
Checksum | 0x00000000 (Actual: 0x016a9acf) |
OS Version | 6.1 |
PEiD Signatures |
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
|
Digital Signature | The PE file does not contain a certificate table. |
Imports |
1 libraries
kernel32 |
Exports | 0 functions |
Resources | 0 Resources |
Sections | 6 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
9,913,192 bytes | 9,913,344 bytes | 6.07 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
E213AE83D9A96A9A6022B95DE292A38F |
.rdata |
0x00976000 |
11,883,800 bytes | 11,884,032 bytes | 4.66 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
AAC7007A13096ADCC7068CFB0932B1F6 |
.data |
0x014cc000 |
2,205,552 bytes | 1,756,672 bytes | 5.48 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D973894D4D0FF7F2C0E33D65B173F8E9 |
.idata |
0x016e7000 |
1,228 bytes | 1,536 bytes | 3.79 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
CF267A74796E3857AB2D23A3F14EBB93 |
.reloc |
0x016e8000 |
163,590 bytes | 163,840 bytes | 5.43 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
BB1C724B121C7848059762683B86290D |
.symtab |
0x01710000 |
4 bytes | 512 bytes | 0.02 (Normal) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
07B5472D347D42780469FB2654B7FC54 |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important