File Name | Ahsoker-32.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.216.174 |
Database Version | 2025-05-10 14:00:21 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
500faeb4fb67e849c802dee91e3158f3
|
|
SHA1 |
0014c1608737bc23623cbc1879394949a6b577f7
|
|
SHA256 |
fd6be1266d0a5fc76aca6ad020c1018777650d213c858003fb9658f71ff818dc
|
|
SHA512 |
ec8996e13a9491eaef8d7ad5af81a55cfc46a3b5556420c696f672c5ef2467748e18b8e9c2875b58bb99655d0170e297e342e13d9c1e80d4ad1ed0571911747a
|
|
ImpHash |
660d6131b536922c79e28f65ed69433a
|
Icon |
Hash: 1f9b9ea4123960ab80c2b9cfb9b23cbb
Fuzzy: 139419f4ede41dae61880c3bcd1d9d9d dHash: 2b61e0a2c4cc6913 |
Image Base | 0x00400000 |
Entry Point | 0x00401110 |
Compilation Time | 2024-09-10 03:01:33 |
Checksum | 0x0001e6b4 (Actual: 0x0001e6b4) |
OS Version | 6.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports | 12 libraries |
Exports | 0 functions |
Resources | 2 Resources |
Sections | 6 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
6,516 bytes | 6,656 bytes | 6.22 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
83944D5F0B7D8E91DB57E4D75714DE76 |
.rdata |
0x00003000 |
3,281 bytes | 3,584 bytes | 4.70 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
EF982494C34BBD88594CB296404BB801 |
.buildid |
0x00004000 |
53 bytes | 512 bytes | 0.60 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
ED73429BEA50CFB452D392877C00DAEC |
.data |
0x00005000 |
268 bytes | 512 bytes | 1.21 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
4E2186957C2DA4E8FFDFB92E8527B8B0 |
.tls |
0x00006000 |
8 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x00007000 |
79,976 bytes | 80,384 bytes | 7.99 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
60AAD190A72C3B76D4FC448B35DDC9D1 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 1 | 79,795 bytes | |
RT_GROUP_ICON | 1 | 20 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important