Gridinsoft Logo
File Icon

The 電車えっちパラダイス.eXe (TVP(KIRIKIRI) 2 core / Scripting Platform for Win32) File Analysis

Updated 1 month ago
Checked by Malware Check
電車えっちパラダイス.eXe

Technical Analysis

File Name 電車えっちパラダイス.eXe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-14 02:00:24 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,499,008
File Size (bytes)
2025-11-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d9f432bfb14d1180e355ec2083872daa
SHA1
cdf5a0c0edcfa6a6e4950506cee4e7d05f605028
SHA256
dcdb7bfbeebc38fd7e9b7c080279bf15d1c510074ce91ce27b3290efafb4a975
SHA512
c0dc8f7f37c47a403bd87544805c879450894fb71e4051d415c990bcf0978c224bc55609a36c253c09f3ea05bffc864a5a77c4079637362cd42c34872b39e574
ImpHash
0de7e9f02e5ef33ba0c37ce83b044912

PE Analysis

Basic Information

▼
Icon
Hash: dd189ceb3d9db97b04e4d282ce1283f1
Fuzzy: ef2d2af8aa80143dff018bc9cc6bfb52
dHash: 1b7d541431ea4a72
Image Base 0x00400000
Entry Point 0x00401000
Compilation Time 2010-10-26 08:26:39
Checksum 0x00000000 (Actual: 0x0036561d)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 11 libraries
Exports 38 functions
Resources 68 Resources
Sections 12 Sections

Version Information

▼
CompanyName
FileDescription TVP(KIRIKIRI) 2 core / Scripting Platform for Win32
FileVersion 2.32.2.426
InternalName tvp2/win32
LegalCopyright (KIRIKIRI core) (C) 1997-2008 W.Dee and Contributors All Rights Reserved. This software is based in part on the work of Independent JPEG Group. For details: Run this program with '-about' option.
LegalTrademarks
OriginalFilename
ProductName
ProductVersion 1.0.0.0
Comments
PrivateBuild
SpecialBuild
Translation 0x0411 0x03a4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,781,184 bytes 2,780,160 bytes 6.58 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ EAD582758034BC866ABA23C8AD3673DC
.data 0x002a8000 1,155,072 bytes 484,864 bytes 4.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9E9923738355244E4006D4500BA5AAF6
.tls 0x003c2000 4,096 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
ConstSeg 0x003c3000 4,096 bytes 512 bytes 0.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 608724C36455D438BDF3E6C858CFE0CB
DataSeg 0x003c4000 20,480 bytes 16,896 bytes 0.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E9F05C2C7E41DA5EA3C3262F21F2194C
CodeSeg 0x003c9000 53,248 bytes 51,712 bytes 6.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 1618C94ECDCD985B4A7DB91BA34E2525
adata 0x003d6000 4,096 bytes 1,536 bytes 3.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4D46851FCADE7BA35D941F36299A4486
.rdata 0x003d7000 4,096 bytes 512 bytes 0.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ CEF057D51A71772E587FEBFD2AE547BA
.idata 0x003d8000 16,384 bytes 13,312 bytes 5.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EC50F0141451EFB3BAB178A8A8371647
.didata 0x003dc000 4,096 bytes 1,536 bytes 4.13 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CE7CD39524E55DDC457FF289A4FAD0C6
.edata 0x003dd000 4,096 bytes 1,536 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DAC2A2EF206A0DD63E8A532053A4F057
.rsrc 0x003de000 143,360 bytes 139,776 bytes 4.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A06F944A6FB9B98BCC3F3B80B7DD36A3
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 68 (96,639 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 8 2,464 bytes
2.5%
RT_BITMAP 22 7,196 bytes
7.4%
RT_ICON 1 7,336 bytes
7.6%
RT_DIALOG 1 82 bytes
0.1%
RT_STRING 14 6,592 bytes
6.8%
RT_RCDATA 12 71,573 bytes
74.1%
RT_GROUP_CURSOR 8 160 bytes
0.2%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 1,216 bytes
1.3%

Certificate Chain Analysis

▼
Certificate Information
Description TVP(KIRIKIRI) 2 core / Scripting Platform for Win32
File Version 2.32.2.426
Internal Name tvp2/win32
Copyright (KIRIKIRI core) (C) 1997-2008 W.Dee and Contributors All Rights Reserved. This software is based in part on the work of Independent JPEG Group. For details: Run this program with '-about' option.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware