Gridinsoft Logo
File Icon

The PhotoResizerExpertSetup.exe (Photo Resizer Expert) File Analysis

Updated 1 year ago
Checked by Malware Check
PhotoResizerExpertSetup.exe

Technical Analysis

File Name PhotoResizerExpertSetup.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
SSDEEP Hash
393216:kqoApJLg+//HPRcTfGJdLzduvZeDfl3Y6caXm5TkIbdPybzpTIq:kqoApJLgyM+LDq6caXmiIbGpTIq
Scanner Version 1.0.179.174
Database Version 2024-06-13 17:00:26 UTC
⚠

Suspicious File Detected

Detected by 8 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
11%
Detection Rate
22,107,824
File Size (bytes)
8/74
Engines Detected
2024-06-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d7dfff1111c9c071a45ec07552c24e4c
SHA1
26181ddea8767d7f7c35acae3917d7868b8cb472
SHA256
69011f22c80007abcda7ea7f0bdc546a999c68f8b65cea37884e01323a7ca356
SHA512
86497954d79d3bd63970c43e19e3e06eb36783d5e07f63cf9f757b178d6b1b63ecbfad14f24ab41478646f76c2881d3769fd3fcf92d962bd297fd8bb13714671
ImpHash
b34f154ec913d2d2c435cbd644e91687

Security Engines with Detections (8 of 74)

ESET-NOD32
a variant of MSIL/4Dots.A potentially unwanted Malicious
Paloalto
generic.ml Malicious
NANO-Antivirus
Trojan.Win32.4Dots.kgiglz Malicious
Rising
PUA.4Dots!8.1272B (CLOUD) Malicious
Malwarebytes
PUP.Optional.4Dots Malicious
Ikarus
PUA.MSIL.4dots Malicious
Fortinet
Adware/4Dots Malicious
DeepInstinct
MALICIOUS Malicious
66 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: d434856d8d0ccb870bb73a1a7b4a5c87
Fuzzy: eb52a1a6cfa682986b2b40e55432602c
dHash: 86b2b2c4c4a2a2e6
Image Base 0x00400000
Entry Point 0x0040338f
Compilation Time 2018-01-30 03:57:48
Checksum 0x0151dd95 (Actual: 0x0151dd95)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 7 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32
Exports 0 functions
Resources 64 Resources
Sections 5 Sections

Version Information

▼
Comments
CompanyName softpcapps Software
FileDescription Photo Resizer Expert
FileVersion 1.4.0
LegalCopyright Copyright 2023 softpcapps Software
LegalTrademarks
ProductName Photo Resizer Expert
ProductVersion 1.4.0.0
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 26,151 bytes 26,624 bytes 6.45 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 8C030DFED318C62753A7B0D60218279B
.rdata 0x00008000 5,274 bytes 5,632 bytes 5.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 966A3835FD2D9407261AE78460C26DCC
.data 0x0000a000 176,120 bytes 1,536 bytes 4.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 939516377E7577B622EB1FFDC4B5DB4A
.ndata 0x00035000 172,032 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x0005f000 38,664 bytes 38,912 bytes 2.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 45AD386E40DF9A9AD88BBAA4D720A7F6

Resource Analysis

▼
Total Resources: 64 (35,330 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 19,160 bytes
54.2%
RT_DIALOG 54 14,268 bytes
40.4%
RT_GROUP_ICON 1 104 bytes
0.3%
RT_VERSION 1 728 bytes
2.1%
RT_MANIFEST 1 1,070 bytes
3%

Certificate Chain Analysis

▼
Certificate Information
Product Photo Resizer Expert
Description Photo Resizer Expert
File Version 1.4.0
Signing Date 10:54 AM 01/03/2024 (546 days ago)
Verification Status Signed
Signers CHRISTOS CHRISTODOULELIS; SSL.com Code Signing Intermediate CA RSA R1; SSL.com Root Certification Authority RSA
Counter Signers SSL.com Timestamping Unit 2022; SSL.com Timestamping Issuing RSA CA R1; SSL.com Root Certification Authority RSA
Copyright Copyright 2023 softpcapps Software
Certificate Chain Summary
SSL.com Code Signing Intermediate CA RSA R1 #1 Primary
Validity Period: 2016-06-24 20:44:30 → 2031-06-24 20:44:30
Signature Algorithm: sha256RSA
Serial Number: 64 33 51 D3 C7 38 9F 08
CHRISTOS CHRISTODOULELIS #2 Chain
Validity Period: 2023-10-26 11:29:17 → 2026-10-25 11:29:17
Signature Algorithm: sha256RSA
Serial Number: 25 F2 0F 52 8C 5F 02 4C FB A5 E9 59 1E A4 60 16
SSL.com Timestamping Unit 2022 #3 Chain
Validity Period: 2022-12-09 18:30:51 → 2032-12-06 18:30:50
Signature Algorithm: sha256RSA
Serial Number: 1A D6 08 A7 D6 34 B5 CD DE 97 CB A3 CC F0 D0 4B
SSL.com Timestamping Issuing RSA CA R1 #4 Chain
Validity Period: 2019-11-13 18:50:05 → 2034-11-12 18:50:05
Signature Algorithm: sha256RSA
Serial Number: 6D 52 18 70 87 E8 23 4D 85 60 00 D0 80 8F 93 56

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
8 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware