× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: c2d3188c196b06797d52ea0703e0d4ba1b46d3164aa420803ea048cd756646fe
File name: Chimpeon_1.17.9.1_Setup.exe
Detection ratio: 0 / 67
Analysis date: 2018-10-17 11:02:09 UTC ( 1 month, 3 weeks ago ) View latest
Antivirus Result Update
Ad-Aware 20181017
AegisLab 20181017
AhnLab-V3 20181017
Alibaba 20180921
ALYac 20181017
Antiy-AVL 20181017
Arcabit 20181017
Avast 20181017
Avast-Mobile 20181017
AVG 20181017
Avira (no cloud) 20181017
Babable 20180918
Baidu 20181017
BitDefender 20181017
Bkav 20181017
CAT-QuickHeal 20181013
ClamAV 20181017
CMC 20181017
CrowdStrike Falcon (ML) 20180723
Cybereason 20180225
Cylance 20181017
Cyren 20181017
DrWeb 20181017
eGambit 20181017
Emsisoft 20181017
Endgame 20180730
ESET-NOD32 20181017
F-Prot 20181017
F-Secure 20181017
Fortinet 20181017
GData 20181017
Ikarus 20181017
Sophos ML 20180717
Jiangmin 20181017
K7AntiVirus 20181017
K7GW 20181017
Kaspersky 20181017
Kingsoft 20181017
Malwarebytes 20181017
MAX 20181017
McAfee 20181017
McAfee-GW-Edition 20181017
Microsoft 20181017
eScan 20181017
NANO-Antivirus 20181017
Palo Alto Networks (Known Signatures) 20181017
Panda 20181016
Qihoo-360 20181017
Rising 20181017
SentinelOne (Static ML) 20181011
Sophos AV 20181017
SUPERAntiSpyware 20181015
Symantec 20181017
Symantec Mobile Insight 20181001
TACHYON 20181017
Tencent 20181017
TheHacker 20181015
TrendMicro 20181017
TrendMicro-HouseCall 20181017
Trustlook 20181017
VBA32 20181017
VIPRE 20181017
ViRobot 20181017
Webroot 20181017
Yandex 20181016
Zillya 20181017
ZoneAlarm by Check Point 20181017
Zoner 20181016
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
FileVersionInfo properties
Copyright

Product Chimpeon
File version
Description Chimpeon Setup
Comments This installation was built with Inno Setup.
Packers identified
F-PROT INNO
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 1992-06-19 22:22:17
Entry Point 0x0000AA98
Number of sections 8
PE sections
Overlays
MD5 de939b0e7a5ba7f7a2e2a2756df43478
File type data
Offset 206336
Size 2036741
Entropy 8.00
PE imports
LookupPrivilegeValueA
RegCloseKey
OpenProcessToken
RegQueryValueExA
AdjustTokenPrivileges
RegOpenKeyExA
InitCommonControls
GetSystemTime
GetLastError
GetEnvironmentVariableA
GetStdHandle
EnterCriticalSection
GetUserDefaultLangID
GetSystemInfo
GetFileAttributesA
GetExitCodeProcess
ExitProcess
CreateDirectoryA
VirtualProtect
GetVersionExA
RemoveDirectoryA
RtlUnwind
LoadLibraryA
GetACP
DeleteCriticalSection
GetCurrentProcess
SizeofResource
GetLocaleInfoA
LocalAlloc
LockResource
IsDBCSLeadByte
DeleteFileA
GetWindowsDirectoryA
GetSystemDefaultLCID
SetErrorMode
MultiByteToWideChar
GetCommandLineA
GetProcAddress
FormatMessageA
SetFilePointer
RaiseException
WideCharToMultiByte
GetModuleHandleA
ReadFile
InterlockedExchange
WriteFile
CloseHandle
GetSystemDirectoryA
GetFullPathNameA
LocalFree
CreateProcessA
GetModuleFileNameA
InitializeCriticalSection
LoadResource
VirtualQuery
VirtualFree
TlsGetValue
Sleep
GetFileType
SetEndOfFile
TlsSetValue
CreateFileA
GetVersion
FindResourceA
VirtualAlloc
GetFileSize
SetLastError
LeaveCriticalSection
SysStringLen
SysAllocStringLen
VariantCopyInd
VariantClear
VariantChangeTypeEx
CharPrevA
CreateWindowExA
LoadStringA
DispatchMessageA
CallWindowProcA
MessageBoxA
PeekMessageA
SetWindowLongA
MsgWaitForMultipleObjects
TranslateMessage
ExitWindowsEx
DestroyWindow
Number of PE resources by type
RT_ICON 8
RT_STRING 6
RT_MANIFEST 1
RT_RCDATA 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
ENGLISH US 11
NEUTRAL 7
PE resources
ExifTool file metadata
SubsystemVersion
4.0

Comments
This installation was built with Inno Setup.

LinkerVersion
2.25

ImageVersion
6.0

FileSubtype
0

FileVersionNumber
0.0.0.0

LanguageCode
Neutral

FileFlagsMask
0x003f

FileDescription
Chimpeon Setup

ImageFileCharacteristics
No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi

CharacterSet
Unicode

InitializedDataSize
163840

EntryPoint
0xaa98

MIMEType
application/octet-stream

TimeStamp
1992:06:19 23:22:17+01:00

FileType
Win32 EXE

PEType
PE32

UninitializedDataSize
0

OSVersion
1.0

FileOS
Win32

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CodeSize
41472

ProductName
Chimpeon

ProductVersionNumber
0.0.0.0

FileTypeExtension
exe

ObjectFileType
Executable application

File identification
MD5 b8ba47d97f9515be511c5493073a2ac0
SHA1 7c58c767580f4149b01e29ad0a95c302908b33ce
SHA256 c2d3188c196b06797d52ea0703e0d4ba1b46d3164aa420803ea048cd756646fe
ssdeep
49152:q75Z4GEgk1GPraknTmkQn/sKTzS0TAZdHO/AkLb0X0KI:e5ZVLrxVAj+duokLb0X0KI

authentihash 6c8883a6e9d2f7aaaa6858486fb3cf4907f5ece704ce3b78bb4a02b02c578020
imphash 2fb819a19fe4dee5c03e8c6a79342f79
File size 2.1 MB ( 2243077 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID Inno Setup installer (80.3%)
Win32 Executable Delphi generic (10.3%)
Win32 Executable (generic) (3.3%)
Win16/32 Executable Delphi generic (1.5%)
OS/2 Executable (generic) (1.4%)
Tags
peexe overlay

VirusTotal metadata
First submission 2018-10-17 11:02:09 UTC ( 1 month, 3 weeks ago )
Last submission 2018-11-16 13:58:10 UTC ( 3 weeks, 6 days ago )
File names Chimpeon_1.17.9.1_Setup.exe
Chimpeon_1.17.9.1_Setup.exe
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!
Condensed report! The following is a condensed report of the behaviour of the file when executed in a controlled environment. The actions and events described were either performed by the file itself or by any other process launched by the executed file or subjected to code injection by the executed file.
Opened files
Read files
Written files
Deleted files
Created processes
Created mutexes
Runtime DLLs