File Name | ncc-devices-x32.exe |
File Type |
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
|
Scanner Version | 1.0.212.174 |
Database Version | 2025-04-03 21:00:36 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
1e091db06bd6ad632c8b343c47f9bdee
|
|
SHA1 |
4eb33ee5b33e30a491cfa06eb5ce359c843c891d
|
|
SHA256 |
f856e1f9bf4f0a9b7caacd6a3ce59ed7ba5b60db8039264738ab9e09ccd063e3
|
|
SHA512 |
3d5b711759598b7271f71ab8894e68c25f86545d718e6c3c9c1b65471609a31512c18cd8b70ba4c363486134582c6e49c102ec02a15172675c982dd3fee5f566
|
|
ImpHash |
9cbefe68f395e67356e2a5d8d1b285c0
|
Image Base | 0x00400000 |
Entry Point | 0x004619b0 |
Compilation Time | 1970-01-01 00:00:00 |
Checksum | 0x00000000 (Actual: 0x01b938ac) |
OS Version | 6.1 |
PEiD Signatures |
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
1 libraries
kernel32 |
Exports | 0 functions |
Resources | 1 Resources |
Sections | 14 Sections |
ProductVersion | 1.0.6 |
Translation | 0x0409 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
4,668,497 bytes | 4,668,928 bytes | 6.04 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
D8CAD67CB2E53661962FD7DCE6421BD1 |
.rdata |
0x00475000 |
18,854,084 bytes | 18,854,400 bytes | 6.13 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
AEFABD254DAC6A0B4578DE5793399572 |
.data |
0x01671000 |
1,013,868 bytes | 782,848 bytes | 5.41 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A62EC7F37596CD5DEA59EA606583621D |
/4 |
0x01769000 |
295 bytes | 512 bytes | 5.10 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
43DC7A0AE5A7067502907DB800396667 |
/19 |
0x0176a000 |
810,961 bytes | 811,008 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
4EE3729C2B767659482825180CB57C47 |
/32 |
0x01830000 |
148,577 bytes | 148,992 bytes | 7.98 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
076BB5FB53530970252DC71BE3323138 |
/46 |
0x01855000 |
42 bytes | 512 bytes | 0.74 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
56D08C10AA9E5C0C3680F67F8992B3D4 |
/65 |
0x01856000 |
1,363,194 bytes | 1,363,456 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
C2A0F42A91E04FF0911C54577EC06D07 |
/78 |
0x019a3000 |
972,744 bytes | 972,800 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
6D84A668183056CEF26607647CA1785F |
/90 |
0x01a91000 |
312,509 bytes | 312,832 bytes | 7.95 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
D198EA74DCC035F793E41486CAA196F7 |
.idata |
0x01ade000 |
988 bytes | 1,024 bytes | 4.82 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
73736F773CE1336FFF0CEA76625378D8 |
.reloc |
0x01adf000 |
203,918 bytes | 204,288 bytes | 6.67 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
8056E288277165D226DFBAC47D2BA8E8 |
.symtab |
0x01b11000 |
749,168 bytes | 749,568 bytes | 5.47 (Normal) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
9F9498881FAEC246575EF5C1136681C4 |
.rsrc |
0x01bc8000 |
360 bytes | 512 bytes | 2.07 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DC2D26955C5621278732F273150F4286 |
5 section(s) with high entropy (≥7.5) detected - possible packing/encryption
1 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_VERSION | 1 | 268 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important