The Zeus Executor 739390 exe (Application Chance) Chance Software File Malware Analysis
Gridinsoft Logo
File Icon

The Zeus-Executor_739390.exe (Application Chance) File Analysis

Updated 3 days ago
Checked by Malware Check
Zeus-Executor_739390.exe

Technical Analysis

File Name Zeus-Executor_739390.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
196608:2UYtjv+rhXYlhGnY5y4hL4pO5It8zoRD/P9elO4bngLspiq8LdA8/xNHWjDa:C+rZYqYccLl5I/RDdOO4LZf8BA8/72fa
Scanner Version 1.0.224.174
Database Version 2025-09-13 19:00:55 UTC
⚠

Suspicious File Detected

Detected by 7 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
10%
Detection Rate
14,896,768
File Size (bytes)
7/72
Engines Detected
2025-09-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
64eea0addb7e9058b27d535dea3fca4b
SHA1
d5c1cdd130c2a6a54266cde76257b8bcfbc8d5a4
SHA256
5890226f4925dda4e7f83fbc1d136df2b1f9033eeb4eb11ed5d66bb5f9648d42
SHA512
86f462045a080ea8d971d82c4b684c939050d7123146bb8896827e5b72ccec895823e2ed5082718ec01365188b0d2765fea30ae2ae226fb8e2998bd02df8b60f
ImpHash
2ffe9fcde4dc454e1472ea1cf9013382

Security Engines with Detections (7 of 72)

Bkav
W32.AIDetectMalware Malicious
Elastic
malicious (high confidence) Malicious
CrowdStrike
win/grayware_confidence_70% (D) Malicious
McAfeeD
ti!5890226F4925 Malicious
Ikarus
PUA.OpenSUpdater.Ks Malicious
VBA32
TScope.Trojan.Delf Malicious
DeepInstinct
MALICIOUS Malicious
65 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: e70ab6434b901bf0d86cad4f2e381b4b
Fuzzy: c0aeeb48c2783a270a993faae44e6ec1
dHash: 00b28eabababa600
Image Base 0x00400000
Entry Point 0x007842ef
Compilation Time 2025-07-10 14:20:31
Checksum 0x00e39c62 (Actual: 0x00e39c62)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 7 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, bcrypt
Exports 1 functions
Resources 25 Resources
Sections 7 Sections

Version Information

▼
CompanyName Chance Software
FileDescription Application Chance
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
LegalCopyright Copyright 2014-2025 Chance Software
ProductName Application Chance
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 3,956,380 bytes 3,956,736 bytes 5.80 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ DF550569167AE225E552635B1CE8C391
.rdata 0x003c7000 207,074 bytes 207,360 bytes 5.64 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A444C7D1139A6F8FCF5DF4EF1323FC8F
.data 0x003fa000 31,360 bytes 9,216 bytes 4.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 8D1CE829E084D8413AA71F9B7FAAE91C
.gfids 0x00402000 2,804 bytes 3,072 bytes 3.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 08C62A4B3B793F39847B59C575EFF691
.tls 0x00403000 9 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1F354D76203061BFDD5A53DAE48D5435
.rsrc 0x00404000 9,472 bytes 9,728 bytes 3.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 708A1F5CCF3DBE33CF23B922F08A4E1D
.reloc 0x00407000 63,864 bytes 64,000 bytes 6.58 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 87B422AC825BD8499A8EF2A1A2F3FDF3
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 25 (8,042 bytes)
Resource Type Count Total Size Percentage
RT_ICON 2 1,040 bytes
12.9%
RT_DIALOG 4 2,048 bytes
25.5%
RT_STRING 16 2,766 bytes
34.4%
RT_GROUP_ICON 1 34 bytes
0.4%
RT_VERSION 1 652 bytes
8.1%
RT_MANIFEST 1 1,502 bytes
18.7%

Certificate Chain Analysis

▼
Certificate Information
Product Application Chance
Description Application Chance
File Version 1.0.0.0
Copyright Copyright 2014-2025 Chance Software
Certificate Chain Summary
GlobalSign GCC R45 EV CodeSigning CA 2020 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
Online Investment Opportunities, LLC #2 Chain
Validity Period: 2024-07-10 18:37:13 → 2025-07-11 18:37:13
Signature Algorithm: sha256RSA
Serial Number: 6B 9D DE 71 EE 69 5B 35 A0 CA 91 09
Globalsign TSA for CodeSign1 - R6 #3 Chain
Validity Period: 2025-04-11 14:47:39 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 00 0B 20 05 B3 94 07 62 DB 3E 36 79 94 9B A9
GlobalSign Timestamping CA - SHA384 - G4 #4 Chain
Validity Period: 2018-06-20 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 EC 1C 92 40 DE FD 2E 40 5D 7C 47 74
GlobalSign #5 Chain
Validity Period: 2014-12-10 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 45 E6 BB 03 83 33 C3 85 65 48 E6 FF 45 51

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
7 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware