Gridinsoft Logo
File Icon

The windows-movie-maker-16.4.3528.331-installer_R1X-ff1.exe (Softonic International SA) File Analysis

Updated 5 minutes ago
Checked by Malware Check
windows-movie-maker-16.4.3528.331-installer_R1X-ff1.exe

Technical Analysis

File Name windows-movie-maker-16.4.3528.331-installer_R1X-ff1.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
49152:zxXXm66OSMEqj6mbBHleiw2Gefn4YM09XanI3UM1:zxHXSMEqj6mbBHle5ew2UI3J
Scanner Version 1.0.219.174
Database Version 2025-07-01 16:00:26 UTC
⚠

Suspicious File Detected

Detected by 8 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
11%
Detection Rate
1,962,264
File Size (bytes)
8/72
Engines Detected
2025-07-01
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
dbc6840e173cfea5198332a6380e8280
SHA1
d6dfc15b29e9f7ec48da7a7d975a14e9c0f84f00
SHA256
6a8b4ea5e9dbbfe8675539021abf69a4676bc1b1e6133b42ef45ff57a2dc43a7
SHA512
b5a218c832a0e34c0680cee3b2c797151cfc83b12fe8bbbf0759b75ce64e504c08196e035c2daf5ddf5f039ee8888ed670ae2e56ec3753eb0d59e4d76e603839
ImpHash
efd455830ba918de67076b7c65d86586

Security Engines with Detections (8 of 72)

Elastic
malicious (moderate confidence) Malicious
Skyhigh
Artemis!PUP Malicious
Malwarebytes
PUP.Optional.Softonic Malicious
CrowdStrike
win/grayware_confidence_60% (W) Malicious
Webroot
W32.Adware.Gen Malicious
AhnLab-V3
PUP/Win.Softonic.C5768739 Malicious
TrellixENS
Artemis!DBC6840E173C Malicious
DeepInstinct
MALICIOUS Malicious
64 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: a0ef7c81eee20e999575764306184ccf
Fuzzy: 8341e53a6f1047f3c936b4d36dc8f542
dHash: 5050d274ccec82ae
Image Base 0x00400000
Entry Point 0x004acfe0
Compilation Time 2025-05-03 14:45:36
Checksum 0x001ee0ae (Actual: 0x001ee0ae)
OS Version 6.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 5 libraries
kernel32, comctl32, user32, oleaut32, advapi32
Exports 2 functions
Resources 31 Resources
Sections 11 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName
FileDescription Softonic International SA
FileVersion 2.41.2.9280
LegalCopyright ©2023 Softonic International SA
OriginalFileName
ProductName Softonic International SA
ProductVersion 3.1.5.8
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 698,084 bytes 698,368 bytes 6.39 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B8445BDD9E5484C726072A6120DAC5D3
.itext 0x000ac000 6,024 bytes 6,144 bytes 6.25 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 5F4B1E9E79C8B34D6A04F97D624934E2
.data 0x000ae000 15,356 bytes 15,360 bytes 4.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5C86C8844D87A63141D9256AB8648C6D
.bss 0x000b2000 29,348 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x000ba000 4,198 bytes 4,608 bytes 4.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CFABBE97F496978BE1D9ED2B0E76508C
.didata 0x000bc000 420 bytes 512 bytes 2.76 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6B25D6A3BA6793DF88CEEC45D9ED59B3
.edata 0x000bd000 113 bytes 512 bytes 1.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1F044B007F9A7C5E77E0A9392C1C3BCB
.tls 0x000be000 24 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x000bf000 93 bytes 512 bytes 1.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 48BDF6E6093F9760E6F540D2B96A5683
.reloc 0x000c0000 70,408 bytes 70,656 bytes 6.71 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 94B970C14A85684DE6C6A4DFAA0A363B
.rsrc 0x000d2000 70,144 bytes 70,144 bytes 3.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D2DB9CD5B4E6FBDFF9F3168F998316EA
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 31 (68,381 bytes)
Resource Type Count Total Size Percentage
RT_ICON 13 55,173 bytes
80.7%
RT_STRING 12 8,692 bytes
12.7%
RT_RCDATA 3 956 bytes
1.4%
RT_GROUP_ICON 1 188 bytes
0.3%
RT_VERSION 1 1,412 bytes
2.1%
RT_MANIFEST 1 1,960 bytes
2.9%

Certificate Chain Analysis

▼
Certificate Information
Product Softonic International SA
Description Softonic International SA
File Version 2.41.2.9280
Signing Date 09:27 PM 05/29/2025 (32 days ago)
Verification Status Signed
Signers SOFTONIC INTERNATIONAL SA; Sectigo Public Code Signing CA EV R36; Sectigo Public Code Signing Root R46; Sectigo (AAA)
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Copyright ©2023 Softonic International SA
Certificate Chain Summary
Sectigo Public Code Signing Root R46 #1 Primary
Validity Period: 2021-05-25 00:00:00 → 2028-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 48 FC 93 B4 60 55 94 8D 36 A7 C9 8A 89 D6 94 16
DigiCert Trusted Root G4 #2 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
Sectigo Public Code Signing CA EV R36 #3 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 33 D7 08 A8 91 40 53 19 E2 A5 BB D3 39 B9 AD 6E
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Timestamp 2024 #5 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
SOFTONIC INTERNATIONAL SA #6 Chain
Validity Period: 2025-04-04 00:00:00 → 2026-04-04 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 4F 1D A8 90 B7 3E B6 D3 5A 22 C3 70 91 7A 0D C6

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
8 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware