Nombre del Archivo | 19a00f9246fe6fbb8f0d32c043107775329795152729d20c254312aa4cbe8fc9.exe |
Tipo de Archivo |
Win32 EXE
|
Bytes Mágicos | PE32 executable (console) Intel 80386, for MS Windows |
Hash SSDEEP |
1536:BZFfoiVk98NRpcJKJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJzqjax0kX1/6N:DFfoiKmpujxkX1/9Q
|
Versión del Escáner | 1.0.223.174 |
Versión de la Base de Datos | 2025-08-16 09:00:20 UTC |
Detectado por 6 motores de seguridad - se requiere precaución
Tipo de Hash | Valor | Acción |
---|---|---|
MD5 |
42975383e996bd40f4515a75fad7f372
|
|
SHA1 |
1f6bde41cbb8926d20fe47a7fe449d4c36d2f5b4
|
|
SHA256 |
19a00f9246fe6fbb8f0d32c043107775329795152729d20c254312aa4cbe8fc9
|
|
SHA512 |
e00d0bdabac8f0a316d73687ff1b001cbc77a9ea279038a569d4b5840345c246d937d205012c43448849fa7fb83588865f5d2baebb256bb53fa302b2fb55dcaa
|
|
ImpHash |
a52006b458aaa2ad76de5c8c8d119456
|
Base de Imagen | 0x00400000 |
Punto de Entrada | 0x004014c0 |
Tiempo de Compilación | 2025-07-17 14:26:22 |
Suma de Verificación | 0x000201f9 (Real: 0x000201f9) |
Versión del SO | 4.0 |
Firmas PEiD |
PE32 executable (console) Intel 80386, for MS Windows
|
Firma Digital | No valid SignedData structure was found. |
Importaciones |
3 bibliotecas
ADVAPI32, KERNEL32, msvcrt |
Exportaciones | 0 funciones |
Recursos | 0 Recursos |
Secciones | 15 Secciones |
Nombre | Dirección Virtual | Tamaño Virtual | Tamaño Bruto | Entropía | Características | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
38,596 bytes | 38,912 bytes | 6.20 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
E974ADA17B4FB48A63AD95B8077616A8 |
.data |
0x0000b000 |
80 bytes | 512 bytes | 0.81 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
C7A547FB9E903C6D4F67A0C04DC01A97 |
.rdata |
0x0000c000 |
4,140 bytes | 4,608 bytes | 5.30 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C04095232B9B7D9A024C7A49172CCE40 |
.bss |
0x0000e000 |
2,644 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x0000f000 |
1,768 bytes | 2,048 bytes | 4.39 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
B27BDCD1357D1F32755FB94A99A01FDC |
.CRT |
0x00010000 |
48 bytes | 512 bytes | 0.22 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2589A97FF9C1A873D16199D57E88AAB8 |
.tls |
0x00011000 |
8 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.reloc |
0x00012000 |
1,360 bytes | 1,536 bytes | 6.11 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
242021CDAAD0879DC4B28F9CC6DE423C |
/4 |
0x00013000 |
56 bytes | 512 bytes | 0.22 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
860E9220CAEEC7912C092C1A90FE557F |
/19 |
0x00014000 |
4,038 bytes | 4,096 bytes | 5.26 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
95D241ED13E1A8EDBD67D4726C6B1940 |
/31 |
0x00015000 |
175 bytes | 512 bytes | 2.13 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
559A85E909E773073B8B6D2F9BB39A3A |
/45 |
0x00016000 |
160 bytes | 512 bytes | 1.46 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
B1F7012104ED03224DF87C6EF9D913AD |
/57 |
0x00017000 |
56 bytes | 512 bytes | 0.68 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F0E4BFDC3EC0B77F9603F4733A60EDBA |
/70 |
0x00018000 |
138 bytes | 512 bytes | 2.08 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
12DF4724B61C020D08ABD0AEB03F4B56 |
/81 |
0x00019000 |
434 bytes | 512 bytes | 4.33 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
2EB8563C5F2B7E72918D36C6F79E7649 |
Este archivo no está firmado digitalmente.
⚠ Este archivo carece de firma digital o la cadena de certificados no pudo ser verificada.
Tenga precaución al ejecutar archivos sin firmar de fuentes desconocidas.
No valid SignedData structure was found.
Recomendación: Verifique la fuente del archivo y asegúrese de que provenga de un editor confiable.
Gridinsoft Anti-Malware tiene un motor de escaneo de virus mucho más potente. Recomendamos usarlo para un diagnóstico más preciso de sistemas infectados. Esta breve guía le ayudará a instalar nuestro producto insignia para diagnósticos más precisos:
Descargar Anti-MalwareEste archivo parece limpio, pero el mantenimiento regular de seguridad es importante
Cure su PC de cualquier tipo de malware
GridinSoft Anti-Malware lo ayudará a proteger su computadora contra spyware, troyanos, puertas traseras, rootkits. Limpia su sistema de molestos módulos publicitarios y otras cosas maliciosas desarrolladas por piratas informáticos.