Gridinsoft Logo
File Icon

The Sim_EKB_Install_2025_04_17_Run_As_Admin.exe (Simatic key help) File Analysis

Technical Analysis

File Name Sim_EKB_Install_2025_04_17_Run_As_Admin.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.227.174
Database Version 2025-10-16 21:00:17 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
4,401,664
File Size (bytes)
2025-10-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ef67da620023e4611fcd5024f437162f
SHA1
2a0aca4962139e09a24699a46173919f7644d802
SHA256
36623f2185b4ce6d55e839da6a8c227874b3ea20c23143567027a26ddc473527
SHA512
c94fe83510c0f34bd526162540e105fb0fa84f75b64444e141ed9820f90b4daa91cd686f948e1be8c7e0c6e1e9d56d480f4c6da90066bcb33f1d6975736fb3b9
ImpHash
c7100093c950983a36d798935de261a4

PE Analysis

Basic Information

Icon
Hash: 3b7f343f7bbbf2ed2927bb32a5a0c57c
Fuzzy: f556f203c4aa374525e74e601a0880cf
dHash: 3e9698b86464a4a4
Image Base 0x00400000
Entry Point 0x0076e3f8
Compilation Time 2025-04-17 17:53:51
Checksum 0x00000000 (Actual: 0x0043337e)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 12 libraries
Exports 2 functions
Resources 92 Resources
Sections 11 Sections

Version Information

CompanyName plcforum.uz.ua
FileDescription Simatic key help
FileVersion 2015.03.29
ProductVersion 2015.03.29
ProgramID com.embarcadero.Sim_EKB_Install_prj
ProductName Sim_EKB_Install_prj
Translation 0x0409 0x04e4

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 3,582,172 bytes 3,582,464 bytes 6.08 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 978DE3BE30C019C849DE5F62E1D36A49
.itext 0x0036c000 9,360 bytes 9,728 bytes 6.30 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 16C3E5D01D5AA13770AE5A062488BD37
.data 0x0036f000 186,188 bytes 186,368 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9B8B336A02BAF1E20BB2583E0FE587C0
.bss 0x0039d000 5,466,708 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x008d4000 14,006 bytes 14,336 bytes 5.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9DCB094D9DCB2F14A2F99DF3FDC6CC6E
.didata 0x008d8000 3,216 bytes 3,584 bytes 4.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE ECC58FE12DDC61F1C514C058C4DFECF6
.edata 0x008d9000 124 bytes 512 bytes 1.52 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1F0F834838995A1F676884AEB1B3209C
.tls 0x008da000 84 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x008db000 93 bytes 512 bytes 1.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F1EAE46900CD74E8B32E2FB0456D2B57
.reloc 0x008dc000 312,584 bytes 312,832 bytes 6.63 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2D0B6814D55F132D7DC00C850E6BD09B
.rsrc 0x00929000 290,304 bytes 290,304 bytes 6.88 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 645295494BB9945FD98BBE750F1188D1
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 92 (284,322 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 7 2,156 bytes
0.8%
RT_BITMAP 16 3,384 bytes
1.2%
RT_ICON 1 744 bytes
0.3%
RT_STRING 28 22,632 bytes
8%
RT_RCDATA 30 253,103 bytes
89%
RT_GROUP_CURSOR 7 140 bytes
0%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 648 bytes
0.2%
RT_MANIFEST 1 1,495 bytes
0.5%

Certificate Chain Analysis

Certificate Information
Product Sim_EKB_Install_prj
Description Simatic key help
File Version 2015.03.29

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware