The MonowareInstaller exe (MonowareInstaller) File Malware Analysis
Gridinsoft Logo
File Icon

The MonowareInstaller.exe (MonowareInstaller) File Analysis

Updated 1 year ago
Checked by Malware Check
MonowareInstaller.exe

Technical Analysis

File Name MonowareInstaller.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
SSDEEP Hash
49152:pCqTq24GjdGSrkqXfd+/9Ann+zrEFydHQSZDg:U/WjdGSrkqXf0Fy2rcynB
Scanner Version 1.0.176.174
Database Version 2024-05-21 21:00:29 UTC
⚠

Suspicious File Detected

Detected by 40 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
56%
Detection Rate
1,634,816
File Size (bytes)
40/72
Engines Detected
2024-05-21
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
541c037070e5b10957bc453786564cca
SHA1
8faca4a4bf0d24c1a813422d30254dafbeada20c
SHA256
933aa21150e88442c5a989aae6657b47031c4ba30f58b1d36820d8ecc86f5eff
SHA512
9c39ddcdbd9140b0bc409bb55489b508a828870d2cc2e9ec4bc76034756ac9669ef7afb5ca8f702d5f9d3148eb64221eddae50ee3ba918c8d344054a026b6cb7
ImpHash
f34d5f2d4577ed6d9ceec516c1f5a744

Security Engines with Detections (40 of 72)

Bkav
W32.AIDetectMalware.CS Malicious
Lionic
Trojan.Win32.Generic.4!c Malicious
MicroWorld-eScan
Trojan.GenericKD.72537763 Malicious
FireEye
Trojan.GenericKD.72537763 Malicious
Malwarebytes
Generic.Malware/Suspicious Malicious
Sangfor
Trojan.Win32.Save.a Malicious
K7AntiVirus
Riskware ( 00584baa1 ) Malicious
K7GW
Riskware ( 00584baa1 ) Malicious
BitDefenderTheta
Gen:NN.ZemsilCO.36804.Jn0@ayWz!X Malicious
VirIT
Trojan.Win32.MSIL_Heur.A Malicious
Symantec
ML.Attribute.HighConfidence Malicious
Elastic
malicious (high confidence) Malicious
APEX
Malicious Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09E124 Malicious
Paloalto
generic.ml Malicious
Kaspersky
UDS:DangerousObject.Multi.Generic Malicious
BitDefender
Trojan.GenericKD.72537763 Malicious
Avast
Win32:TrojanX-gen [Trj] Malicious
VIPRE
Trojan.GenericKD.72537763 Malicious
Emsisoft
Trojan.GenericKD.72537763 (B) Malicious
Ikarus
Trojan.Dropper Malicious
Webroot
W32.Trojan.Gen Malicious
Google
Detected Malicious
Varist
W32/ABRisk.ATRU-6384 Malicious
Antiy-AVL
Trojan/Win32.Agent Malicious
Kingsoft
Win32.Troj.Unknown.a Malicious
Microsoft
Trojan:Win32/Wacatac.B!ml Malicious
Arcabit
Trojan.Generic.D452D6A3 Malicious
ZoneAlarm
UDS:DangerousObject.Multi.Generic Malicious
GData
Trojan.GenericKD.72537763 Malicious
AhnLab-V3
Trojan/Win.Generic.C5620470 Malicious
ALYac
Trojan.GenericKD.72537763 Malicious
Cylance
unsafe Malicious
Rising
Trojan.Acll!8.18FEB (CLOUD) Malicious
MAX
malware (ai score=83) Malicious
MaxSecure
Trojan.Malware.1728101.susgen Malicious
Fortinet
Malicious_Behavior.SB Malicious
AVG
Win32:TrojanX-gen [Trj] Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
Suspicious Malicious
32 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: f8bc909bf7e1444ccff05ba39de538de
Fuzzy: 03d34f3e432232d04db1486113825e1a
dHash: 88c4ecccfcec3800
Image Base 0x00400000
Entry Point 0x0057fd4e
Compilation Time 2024-04-25 14:35:17
Checksum 0x00000000 (Actual: 0x001951f5)
OS Version 4.0
PEiD Signatures PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Digital Signature The PE file does not contain a certificate table.
Imports 1 libraries
mscoree
Exports 0 functions
Resources 4 Resources
Sections 3 Sections

Version Information

▼
Translation 0x0000 0x04b0
Comments
CompanyName
FileDescription MonowareInstaller
FileVersion 1.0.0.0
InternalName MonowareInstaller.exe
LegalCopyright Copyright © 2024
LegalTrademarks
OriginalFilename MonowareInstaller.exe
ProductName MonowareInstaller
ProductVersion 1.0.0.0
Assembly Version 1.0.0.0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00002000 1,563,988 bytes 1,564,160 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0DAD4BEDFF5EBE1A9458EC55AFF44306
.rsrc 0x00180000 69,298 bytes 69,632 bytes 2.63 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CA8F2F103E4A9C29E5E76D3C151AF912
.reloc 0x00192000 12 bytes 512 bytes 0.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 86F2609E43C81E0EB94E8BE247C4592D
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 4 (68,994 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 67,624 bytes
98%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 860 bytes
1.2%
RT_MANIFEST 1 490 bytes
0.7%

Certificate Chain Analysis

▼
Certificate Information
Product MonowareInstaller
Description MonowareInstaller
File Version 1.0.0.0
Original Name MonowareInstaller.exe
Internal Name MonowareInstaller.exe
Copyright Copyright © 2024

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
40 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware