Gridinsoft Logo
File Icon

The Офіційний запит 398м24-7, № 399м24-7 .pdf.exe (Optimizes supply chain and logistics processes for efficient trade operations.) File Analysis

Updated 2 years ago
Checked by Malware Check
Офіційний запит 398м24-7, № 399м24-7 .pdf.exe

Technical Analysis

File Name Офіційний запит 398м24-7, № 399м24-7 .pdf.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
24576:/7tqPO/71AS1UmAZLE6GwB6SuRoEPmXG1Y5j9Z3Q+BYPGK4Y81htTIcDFO8csqJ:Rj/zRAZLEqcoAmXKYZrQ+iP6zacTVqJ
Scanner Version 1.0.183.174
Database Version 2024-08-05 11:00:37 UTC
⚠

Suspicious File Detected

Detected by 8 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
11%
Detection Rate
1,627,287
File Size (bytes)
8/75
Engines Detected
2024-08-05
Analysis Date

Scan Another File

The uploaded file itself is not retained or shared with third parties. File names, hashes, and analysis results may appear in public reports. For confidential material, contact Support before uploading. How we use your data.

File Identification

Hash Type Value Action
MD5
22baf6cfab80de22a7d00099d3400ab6
SHA1
1a47982298977bc37e9e5d732a3aecd62e1a5840
SHA256
5e30143f53af82ff891d9801ccff6b30e3dc7f3401bba597accb26e2d3b8b25d
SHA512
701f1903455b24a77ba09ebb8fed8097146f39220b52fce84ee6999192f39a4af4b60f37e8db376e755835825c78f3b0bd7320febecf0293748d8cf3ccb53dfa
ImpHash
be41bf7b8cc010b614bd36bbca606973

Security Engines with Detections (8 of 75)

Skyhigh
Artemis!Trojan Malicious
CrowdStrike
win/grayware_confidence_60% (D) Malicious
Elastic
malicious (high confidence) Malicious
Kaspersky
UDS:DangerousObject.Multi.Generic Malicious
McAfeeD
ti!5E30143F53AF Malicious
Microsoft
Trojan:Win32/Sonbokli.A!cl Malicious
ZoneAlarm
UDS:DangerousObject.Multi.Generic Malicious
McAfee
Artemis!22BAF6CFAB80 Malicious
67 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: fd670c37fdb7e957627c83bf912babbf
Fuzzy: 2351d7821ddd9640031aa83246de6bdc
dHash: cc9a2533737b8ecc
Image Base 0x00400000
Entry Point 0x004038af
Compilation Time 2012-02-24 19:20:04
Checksum 0x00000000 (Actual: 0x00194aff)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 8 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION
Exports 0 functions
Resources 10 Resources
Sections 6 Sections

Version Information

▼
Comments Optimizes supply chain and logistics processes for efficient trade operations.
CompanyName TradeOptimize Dynamics
FileDescription Optimizes supply chain and logistics processes for efficient trade operations.
FileVersion 8.105.6.2898
LegalCopyright Copyright © TradeOptimize Dynamics 2010 All rights reserved.
LegalTrademarks TradeSync is a trademark of TradeOptimize Dynamics
ProductName TradeSync
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 29,324 bytes 29,696 bytes 6.50 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6F264F828CEABDAF406EA3BB765E157A
.rdata 0x00009000 11,118 bytes 11,264 bytes 4.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CCA1CA3FBF99570F6DE9B43CE767F368
.data 0x0000c000 469,916 bytes 512 bytes 1.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 77F0839F8EBEA31040E462523E1C770E
.ndata 0x0007f000 528,384 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00100000 378,672 bytes 378,880 bytes 5.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0AD4129EC30770E2ED8C878917EFA453
.reloc 0x0015d000 4,054 bytes 4,096 bytes 2.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ A1429ECFE2C0A528220CA1381F879D74
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 10 (378,044 bytes)
Resource Type Count Total Size Percentage
RT_ICON 4 375,520 bytes
99.3%
RT_DIALOG 3 636 bytes
0.2%
RT_GROUP_ICON 1 62 bytes
0%
RT_VERSION 1 1,100 bytes
0.3%
RT_MANIFEST 1 726 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product TradeSync
Description Optimizes supply chain and logistics processes for efficient trade operations.
File Version 8.105.6.2898
Signing Date 03:54 AM 07/17/2024 (848 days ago)
Verification Status The digital signature of the object did not verify.
Signers Vivaldi Technologies AS; GlobalSign GCC R45 EV CodeSigning CA 2020; GlobalSign Code Signing Root R45; GlobalSign Root CA - R3
Counter Signers Globalsign TSA for CodeSign1 - R6 - 202311; GlobalSign Timestamping CA - SHA384 - G4; GlobalSign Root CA - R6
Copyright Copyright © TradeOptimize Dynamics 2010 All rights reserved.
Certificate Chain Summary
GlobalSign Code Signing Root R45 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2029-03-18 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 78 03 18 42 45 70 8A 41 CF 6F 01 B8 EE B4 A9 54
GlobalSign GCC R45 EV CodeSigning CA 2020 #2 Chain
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
Vivaldi Technologies AS #3 Chain
Validity Period: 2023-10-10 07:35:44 → 2026-12-18 16:17:34
Signature Algorithm: sha256RSA
Serial Number: 0E 61 94 E2 77 9D 53 1F 89 69 50 FF
Globalsign TSA for CodeSign1 - R6 - 202311 #4 Chain
Validity Period: 2023-11-07 17:13:40 → 2034-12-09 17:13:40
Signature Algorithm: sha256RSA
Serial Number: 01 9B EA DE C8 4D 6B 8F F7 6C 3A 9F 2E 01 24 16
GlobalSign Timestamping CA - SHA384 - G4 #5 Chain
Validity Period: 2018-06-20 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 EC 1C 92 40 DE FD 2E 40 5D 7C 47 74
GlobalSign #6 Chain
Validity Period: 2014-12-10 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 45 E6 BB 03 83 33 C3 85 65 48 E6 FF 45 51

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

Security engines flagged this file. Review the detections and verify the exact download before running it.

  1. 1
    Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
  2. 2
    Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
  3. 3
    Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
  4. 4
    Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
8 security engines flagged this file. Could be a real threat, or could be a false alarm — common with keygens, game trainers, and legitimate system utilities. Check if the file has a valid digital signature and whether it came from the official source.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Portal
Signed in via Gridinsoft Portal · View profile
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware