File Name | 33.exe |
File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
Scanner Version | 1.0.220.174 |
Database Version | 2025-07-11 23:00:16 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
6556647839bd19b413b5c2626b788c78
|
|
SHA1 |
568c4c322642070c77945d09d8e3eff37589d6db
|
|
SHA256 |
ff95382c1c1479fc737ab1486ec90797b370be1ce0b7df002fdd182377125494
|
|
SHA512 |
eb6fd483428ddd27b7feaf0ea35cb11b36f649ff21c2d31651d84bcac5c8186db2309a36006263854c3bb55b063c4457db2c3f06f8adc942261fa4a5a3e34fdc
|
|
ImpHash |
937b71266b082626cc41655fa468747b
|
Image Base | 0x140000000 |
Entry Point | 0x14000132b |
Compilation Time | 1970-01-01 00:00:00 |
Checksum | 0x0008c107 (Actual: 0x0008c107) |
OS Version | 4.0 |
PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
5 libraries
bcrypt, KERNEL32, msvcrt, SHELL32, USER32 |
Exports | 0 functions |
Resources | 0 Resources |
Sections | 17 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
121,648 bytes | 121,856 bytes | 6.22 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
FE778BA48F62DFE15CAE45F7EF58E0EC |
.data |
0x0001f000 |
672 bytes | 1,024 bytes | 1.78 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
1D4BB2910D21EBBC1C088E2D66A44F5B |
.rdata |
0x00020000 |
19,968 bytes | 19,968 bytes | 4.92 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
5B0248A6C1D9EDFD5416F62970254013 |
.pdata |
0x00025000 |
14,472 bytes | 14,848 bytes | 5.35 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C36E50D23BA00866BC3AB4AA11B2F64B |
.xdata |
0x00029000 |
12,088 bytes | 12,288 bytes | 4.09 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
02DE92E3A5DCA6FD2D9C80128747B2B8 |
.bss |
0x0002c000 |
3,184 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x0002d000 |
4,792 bytes | 5,120 bytes | 4.01 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
45A1E923C436C9DA7249B1176F9AFA2E |
.tls |
0x0002f000 |
16 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.reloc |
0x00030000 |
1,096 bytes | 1,536 bytes | 4.52 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
DC5CABCCEBC2EF2531084E9714FE49E7 |
/4 |
0x00031000 |
176 bytes | 512 bytes | 0.61 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
9E95CC307D99AD8F98107379BD104A9D |
/19 |
0x00032000 |
18,956 bytes | 19,456 bytes | 5.77 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
97FFCA3F0EC12BF2C342C15525BF6952 |
/31 |
0x00037000 |
2,118 bytes | 2,560 bytes | 4.38 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
98FB64F9EC8915CB5A4825473806EF6B |
/45 |
0x00038000 |
2,249 bytes | 2,560 bytes | 4.52 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F5130DCE5F990440DD52264CA2154E09 |
/57 |
0x00039000 |
984 bytes | 1,024 bytes | 3.66 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F016CF1194E106FB5E354080AE11CC91 |
/70 |
0x0003a000 |
168 bytes | 512 bytes | 2.41 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
A11AD7E3390329ABC69674049C407B58 |
/81 |
0x0003b000 |
738 bytes | 1,024 bytes | 4.02 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
56A99C417E2BE861C632F9976BF651BF |
/97 |
0x0003c000 |
1,541 bytes | 2,048 bytes | 3.94 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
989A47105D90E0C518B96F862ADB5345 |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important