| SHA256: | 61e9a861fcfb022ee946cb70d224dc3c06eeed3196df3f37c4828cd5691df1ad |
| Nom du fichier : | setup.exe |
| Ratio de détection : | 0 / 46 |
| Date d'analyse : | 2013-04-28 00:18:22 UTC (il y a 4 ans, 5 mois) Voir les derniers |
| Antivirus | Résultat | Mise à jour |
|---|---|---|
| Yandex | 20130427 | |
| AhnLab-V3 | 20130427 | |
| AntiVir | 20130427 | |
| Antiy-AVL | 20130427 | |
| Avast | 20130428 | |
| AVG | 20130427 | |
| BitDefender | 20130428 | |
| ByteHero | 20130425 | |
| CAT-QuickHeal | 20130427 | |
| ClamAV | 20130427 | |
| Commtouch | 20130427 | |
| Comodo | 20130427 | |
| DrWeb | 20130428 | |
| Emsisoft | 20130428 | |
| eSafe | 20130423 | |
| ESET-NOD32 | 20130427 | |
| F-Prot | 20130427 | |
| F-Secure | 20130428 | |
| Fortinet | 20130428 | |
| GData | 20130428 | |
| Ikarus | 20130427 | |
| Jiangmin | 20130427 | |
| K7AntiVirus | 20130426 | |
| K7GW | 20130426 | |
| Kaspersky | 20130428 | |
| Kingsoft | 20130422 | |
| Malwarebytes | 20130427 | |
| McAfee | 20130428 | |
| McAfee-GW-Edition | 20130427 | |
| Microsoft | 20130428 | |
| eScan | 20130428 | |
| NANO-Antivirus | 20130427 | |
| Norman | 20130426 | |
| nProtect | 20130427 | |
| Panda | 20130427 | |
| PCTools | 20130427 | |
| Sophos AV | 20130427 | |
| SUPERAntiSpyware | 20130427 | |
| Symantec | 20130427 | |
| TheHacker | 20130426 | |
| TotalDefense | 20130426 | |
| TrendMicro | 20130427 | |
| TrendMicro-HouseCall | 20130428 | |
| VBA32 | 20130427 | |
| VIPRE | 20130428 | |
| ViRobot | 20130427 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
Authenticode signature block and FileVersionInfo properties
Copyright
http://www.WinPDFEditor.com
Product WinPDFEditor
File version 2.0.1
Description WinPDFEditor Setup
Comments This installation was built with Inno Setup.
Signature verification
Signed file, verified signature
Signing date 3:47 AM 4/24/2013
| Signers |
| Counter signers |
Packers identified
F-PROT INNO, CAB, UPX_LZMA, Unicode
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 1992-06-19 22:22:17
Entry Point 0x00009B60
Number of sections 8
PE sections
Overlays
MD5 384ee7a9c3ee1f469df3b97c379735f4
File type data
Offset 163328
Size 28228160
Entropy 8.00
PE imports
Number of PE resources by type
RT_ICON 10
RT_STRING 6
RT_MANIFEST 1
RT_RCDATA 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
ENGLISH US 13
NEUTRAL 7
PE resources
ExifTool file metadata
UninitializedDataSize
0
Comments
This installation was built with Inno Setup.
LinkerVersion
2.25
ImageVersion
6.0
FileSubtype
0
FileVersionNumber
2.0.1.0
LanguageCode
Neutral
FileFlagsMask
0x003f
CharacterSet
Unicode
InitializedDataSize
124416
EntryPoint
0x9b60
MIMEType
application/octet-stream
LegalCopyright
http://www.WinPDFEditor.com
FileVersion
2.0.1
TimeStamp
1992:06:19 23:22:17+01:00
FileType
Win32 EXE
PEType
PE32
SubsystemVersion
4.0
ProductVersion
2.0.1
FileDescription
WinPDFEditor Setup
OSVersion
1.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
http://www.WinPDFEditor.com
CodeSize
37888
ProductName
WinPDFEditor
ProductVersionNumber
2.0.1.0
FileTypeExtension
exe
ObjectFileType
Executable application
Compressed bundles
File identification
MD5 95df6ca344827d9af453552aaa979cab
SHA1 8553186287413099961ef6024318aee95f03c907
SHA256 61e9a861fcfb022ee946cb70d224dc3c06eeed3196df3f37c4828cd5691df1ad
ssdeep
393216:WMew0P4/5wlrjX9rtdVbjom/yRVQJsXtgWAIVQmVk7QDiNxg1GSRDiny6ksHL:7w4xE5tdVnJ/yRiJTWALm+kISRDqyUL
File size
27.1 MB ( 28391488 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Inno Setup installer (91.2%) Win32 Executable (generic) (3.7%) Win16/32 Executable Delphi generic (1.7%) Generic Win/DOS Executable (1.6%) DOS Executable Generic (1.6%) |
Tags
revoked-cert
peexe
signed
overlay
VirusTotal metadata
First submission
2013-04-24 02:57:30 UTC (il y a 4 ans, 6 mois)
Last submission
2017-06-02 21:52:59 UTC (il y a 4 mois, 2 semaines)
| Noms du fichier |
setup.exe winpdfeditor.exe WinPDFeditor (LAGSW1VQ54K2N6Z).exe winpdfeditor serial=LAGSW1VQ54K2N6Z.exe winpdfeditor v201.exe |
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the
scanned file presents certain characteristics which depending on the
user policies and environment may or may not represent a threat. For
full details see:
https://www.clamav.net/documents/potentially-unwanted-applications-pua
.
Symantec reputation
Suspicious.Insight
Aucun commentaire.
Aucun membre de la communauté VirusTotal n'a encore commenté cet élément, soyez le premier à le faire !
Vous n'êtes pas connecté. Seuls les utilisateurs enregistrés peuvent laisser des commentaires, connectez-vous pour commenter !
Aucun vote.
Personne n'a encore voté pour cet élément, soyez le premier à le faire !