Gridinsoft Logo
File Icon

The daae8d64d00c481cf69922ce8770c5db6d74e273ae03573691602545280779d2.exe (0xc0000005_TEST) File Analysis

Updated 2 days ago
Checked by Malware Check
daae8d64d00c481cf69922ce8770c5db6d74e273ae03573691602545280779d2.exe

Technical Analysis

File Name daae8d64d00c481cf69922ce8770c5db6d74e273ae03573691602545280779d2.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
SSDEEP Hash
3072:nDgc3eyTaPsvyizi43TZ0LeMzxFI3+s1d1vFC/9T1co5FcmqECPfb:DleyTaPO53SLeMdGHkjcWJUP
Scanner Version 1.0.222.174
Database Version 2025-08-08 01:00:32 UTC
⚠

Suspicious File Detected

Detected by 34 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
48%
Detection Rate
234,496
File Size (bytes)
34/71
Engines Detected
2025-08-08
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
c19fab6b180016c1f2d350cf49383927
SHA1
8892e4e10245eeff45f190ed421055d8ec175b5d
SHA256
daae8d64d00c481cf69922ce8770c5db6d74e273ae03573691602545280779d2
SHA512
8c47bee2b60a28c76ed74700fc3d20f636fca4cafab5b4e7bcffa545fb109d4b0c7069aa5d9851ca2ed92ea57d554e78b55a916a95073ca6701c5d47e0296247
ImpHash
f34d5f2d4577ed6d9ceec516c1f5a744

Security Engines with Detections (34 of 71)

Lionic
Trojan.Win32.BadJoke.4!c Malicious
Elastic
malicious (moderate confidence) Malicious
ALYac
Trojan.GenericKD.76984079 Malicious
Malwarebytes
Malware.AI.4280170575 Malicious
Sangfor
Trojan.Win32.Badjoke.V863 Malicious
CrowdStrike
win/malicious_confidence_90% (W) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
ESET-NOD32
a variant of MSIL/BadJoke_AGen.BN Malicious
APEX
Malicious Malicious
Paloalto
generic.ml Malicious
BitDefender
Trojan.GenericKD.76984079 Malicious
MicroWorld-eScan
Trojan.GenericKD.76984079 Malicious
Avast
Win32:MalwareX-gen [Misc] Malicious
Emsisoft
Trojan.GenericKD.76984079 (B) Malicious
VIPRE
Trojan.GenericKD.76984079 Malicious
McAfeeD
ti!DAAE8D64D00C Malicious
CTX
exe.trojan.badjoke Malicious
Sophos
Mal/Generic-S Malicious
Ikarus
Trojan.MSIL.BadJoke Malicious
GData
Win32.Trojan.Agent.NELUKL Malicious
Xcitium
Malware@#1px8rdvdkxcza Malicious
Arcabit
Trojan.Generic.D496AF0F Malicious
Varist
W32/ABTrojan.ZBFZ-1526 Malicious
AhnLab-V3
Malware/Win.Generic.C5783832 Malicious
Cylance
Unsafe Malicious
Panda
Trj/Chgt.AD Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09H225 Malicious
Rising
Trojan.BadJoke!8.EDE4 (CLOUD) Malicious
TrellixENS
Artemis!C19FAB6B1800 Malicious
MaxSecure
Trojan.Malware.325683076.susgen Malicious
Fortinet
PossibleThreat Malicious
AVG
Win32:MalwareX-gen [Misc] Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
Trojan:MSIL/BadJoke_AGen.BT Malicious
37 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 99cf67e65c8c488878896d2c743c8508
Fuzzy: 8f2ad2196ccc87726ff1dfca3cf098dc
dHash: 9c19f34cc93067c6
Image Base 0x00400000
Entry Point 0x0042bb76
Compilation Time 2085-10-15 18:58:20
Checksum 0x00000000 (Actual: 0x00039c89)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
PDB Path C:\Users\Christian\Desktop\Savedfiles\Visual Studio 2022 Projects\0xc0000005\obj\Debug\0xc0000005.pdb
Digital Signature No valid SignedData structure was found.
Imports 1 libraries
mscoree
Exports 0 functions
Resources 8 Resources
Sections 3 Sections

Version Information

▼
Translation 0x0000 0x04b0
Comments
CompanyName
FileDescription 0xc0000005_TEST
FileVersion 1.0.0.0
InternalName 0xc0000005.exe
LegalCopyright Copyright © 2025
LegalTrademarks
OriginalFilename 0xc0000005.exe
ProductName 0xc0000005_TEST
ProductVersion 1.0.0.0
Assembly Version 1.0.0.0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00002000 170,884 bytes 171,008 bytes 7.66 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D9716A332AFFDA9BEA7E9407E9430899
.rsrc 0x0002c000 62,024 bytes 62,464 bytes 7.32 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1B0530A6A1E4E85A6D1D7CA1AC59D025
.reloc 0x0003c000 12 bytes 512 bytes 0.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 6CA156DF30668D13BFAB2C3DC970B86B
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 8 (61,520 bytes)
Resource Type Count Total Size Percentage
RT_ICON 5 60,126 bytes
97.7%
RT_GROUP_ICON 1 76 bytes
0.1%
RT_VERSION 1 828 bytes
1.3%
RT_MANIFEST 1 490 bytes
0.8%

Certificate Chain Analysis

▼
Certificate Information
Product 0xc0000005_TEST
Description 0xc0000005_TEST
File Version 1.0.0.0
Original Name 0xc0000005.exe
Internal Name 0xc0000005.exe
Copyright Copyright © 2025

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
34 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware