Gridinsoft Logo
File Icon

Vuex6496.exe PUP BundleInstaller Analysis

Updated 1 year ago
Checked by Malware Check
vuex6496.exe

Technical Analysis

File Name vuex6496.exe
File Type
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive
Scanner Version 1.0.171.174
Database Version 2024-04-06 17:00:23 UTC
⚠

PUP.Win32.BundleInstaller.st!c

Malware family: BundleInstaller

N/A
Detection Rate
15,590,520
File Size (bytes)
2024-04-06
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
78946a68e28cb8439eaa903960263cd9
SHA1
c1b219a9f35cf8451a09c8d03ec0f187e480d5d1
SHA256
5a3b8fd56c6ad75ee4fc9c2b3ebe57ee29287da5a93d566a3b686633b76af12c
SHA512
3f0a1c8dc45ddff1df415132ffba09fdd8fc73ba17c3a8c6af6995e58aaa2e797d323da94e05e4a60689fccc7860018d14fd8c179e5da61701d86795497ff172
ImpHash
97d587e165bf199f6f30d379b339efd3

PE Analysis

Basic Information

▼
Icon
Hash: 92f8aada3afc7e3f4da55cf2b6f832f0
Fuzzy: 15556d112935b8de848321ca64ee2395
dHash: 7be3c28a349ce830
Image Base 0x00400000
Entry Point 0x00405de0
Compilation Time 2020-03-15 08:41:23
Checksum 0x00ee34ef (Actual: 0x00ee34ef)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 7 libraries
ADVAPI32, COMCTL32, GDI32, KERNEL32, ole32, SHELL32, USER32
Exports 0 functions
Resources 9 Resources
Sections 7 Sections

Version Information

▼
FileDescription VueScan
FileVersion 9.6.47.0
LegalCopyright
ProductName VueScan
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 40,420 bytes 40,448 bytes 6.05 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 88799DF6E402E08F4CD6CAB8D8C10D5D
.data 0x0000b000 264 bytes 512 bytes 1.51 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES 0087564BA851B0FA4E21548B0B48A342
.rdata 0x0000c000 7,152 bytes 7,168 bytes 3.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_32BYTES 9098DE078CBB0170728E53B907E77CBA
.bss 0x0000e000 303,940 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES D41D8CD98F00B204E9800998ECF8427E
.idata 0x00059000 5,232 bytes 5,632 bytes 5.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES C1381F24910907A2DDB595768D3E5BE2
.ndata 0x0005b000 262,144 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0009b000 17,584 bytes 17,920 bytes 5.56 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 4FA3EC6CAD2D89A2A07E180CE1C0E97A

Resource Analysis

▼
Total Resources: 9 (17,015 bytes)
Resource Type Count Total Size Percentage
RT_ICON 3 15,032 bytes
88.3%
RT_DIALOG 3 672 bytes
3.9%
RT_GROUP_ICON 1 48 bytes
0.3%
RT_VERSION 1 416 bytes
2.4%
RT_MANIFEST 1 847 bytes
5%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

PUP.Win32.BundleInstaller.st!c Removal

Gridinsoft has the capability to identify and eliminate PUP.Win32.BundleInstaller.st!c without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware