Gridinsoft Logo
File Icon

The Innocent Witches.exe File Analysis

Updated 22 days ago
Checked by Malware Check
Innocent Witches.exe

Technical Analysis

File Name Innocent Witches.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.231.174
Database Version 2025-12-18 09:00:40 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
285,696
File Size (bytes)
2025-12-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d4a9ed97afb18b06823143c4219943c5
SHA1
db4b87adc617be5d9ee19b193c54da8e0058cb19
SHA256
fcde3a28e516fa1a2bdc107af8a7ff219cb670dd685e28dac979dd3594c1dcb0
SHA512
5a1bb54a7e0254ab53aefef4530cfa1b16cef4dabff4dfb8062128c0499ac4fe2055dc1d797ba625fa47ddcc2cd6350c79fcc8dab2d9f510dfea3c56c271145c
ImpHash
8d88ee3d02e50123906bab082925025d

PE Analysis

Basic Information

▼
Icon
Hash: 12be127770b6096b366a50ff100faf4f
Fuzzy: cf09e7bde8bac403b53de214c5576b22
dHash: 7175313039315919
Image Base 0x140000000
Entry Point 0x140001160
Compilation Time 2025-06-23 01:27:37
Checksum 0x00048dc2 (Actual: 0x00048dc2)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 9 libraries
api-ms-win-crt-private-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-string-l1-1-0, USER32, KERNEL32, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-environment-l1-1-0
Exports 0 functions
Resources 3 Resources
Sections 7 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 6,518 bytes 6,656 bytes 5.89 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E350E5D12B865F27B329760233D88FDC
.rdata 0x00003000 4,320 bytes 4,608 bytes 4.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A2ACDA28D16F9BA7C49956324CBC9FB3
.buildid 0x00005000 53 bytes 512 bytes 0.60 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C7F4379A0FA0A41F9C213FF1C351D7FC
.data 0x00006000 288 bytes 512 bytes 0.64 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A55B2B5B5992EE63766A195AD0506662
.pdata 0x00007000 312 bytes 512 bytes 2.53 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F6366B4E43EDDE63802C654974735B2A
.tls 0x00008000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x00009000 271,328 bytes 271,360 bytes 5.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9FD576BD4E94D32B9E9C5248F06BEEA7

Resource Analysis

▼
Total Resources: 3 (271,096 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 270,376 bytes
99.7%
RT_GROUP_ICON 1 20 bytes
0%
RT_MANIFEST 1 700 bytes
0.3%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware