The Install 542302 exe (Application Entertaining) Entertaining Bread File Malware Analysis
Gridinsoft Logo
File Icon

The Install_542302.exe (Application Entertaining) File Analysis

Updated 3 days ago
Checked by Malware Check
Install_542302.exe

Technical Analysis

File Name Install_542302.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
393216:ZKbc7tA/bBqYccLl5I/RDdOO4LZf8BA8/72f3:ZKNpL8ZJOO6mKCM3
Scanner Version 1.0.224.174
Database Version 2025-09-04 18:00:29 UTC
⚠

Suspicious File Detected

Detected by 14 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
20%
Detection Rate
78,970,184
File Size (bytes)
14/69
Engines Detected
2025-09-04
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5c1addb855c3bb27cee8ae0b7404a8d4
SHA1
0ca70838a53c6d7dc02017ecb0fb8688f82f3dd5
SHA256
b22c4c3a35545b62b236c5606743d30e2bf7f2c3655364d2d43664e8dba41b85
SHA512
657841d6204e2594c33cc4c1ff9c47c7aeada1ed1c1781549c3a7960a11bca37b0790af6ed6d4abaf6bc6bded1b913ddf9bed84cbf4440c343b8e77cabcd15ee
ImpHash
3114e941dd663ac75fa45f3aae2e4e9b

Security Engines with Detections (14 of 69)

Bkav
W32.AIDetectMalware Malicious
Skyhigh
Artemis Malicious
Malwarebytes
Adware.SpecialSearchOffer Malicious
Kaspersky
Trojan-Downloader.Win32.Adload.ulre Malicious
Alibaba
AdWare:Win32/AdLoad.c514e4ef Malicious
Tencent
Win32.Trojan-Downloader.Adload.Aplw Malicious
McAfeeD
ti!B22C4C3A3554 Malicious
Ikarus
PUA.OpenSUpdater.Ks Malicious
Webroot
Win.Trojan.Gen Malicious
Xcitium
ApplicUnwnt@#1qpe4zuql3kkc Malicious
VBA32
TScope.Trojan.Delf Malicious
MaxSecure
Trojan.Malware.415519207.susgen Malicious
Fortinet
Riskware/Application Malicious
DeepInstinct
MALICIOUS Malicious
55 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: e70ab6434b901bf0d86cad4f2e381b4b
Fuzzy: c0aeeb48c2783a270a993faae44e6ec1
dHash: 00b28eabababa600
Image Base 0x00400000
Entry Point 0x0076bf8f
Compilation Time 2025-07-10 14:20:09
Checksum 0x04b5b9a3 (Actual: 0x04b5b9a3)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 7 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, bcrypt
Exports 1 functions
Resources 25 Resources
Sections 7 Sections

Version Information

▼
CompanyName Entertaining Bread
FileDescription Application Entertaining
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
LegalCopyright Copyright 2014-2025 Entertaining Bread
ProductName Application Entertaining
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 3,857,212 bytes 3,857,408 bytes 5.81 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 04DA3CCB85C1856860E3B034D8D44B2D
.rdata 0x003af000 206,626 bytes 206,848 bytes 5.65 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EBB7B76257EDFE435ECDF365EB494B6B
.data 0x003e2000 31,360 bytes 9,216 bytes 4.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EEB0C80486B52FCABB1B8E817400F216
.gfids 0x003ea000 2,804 bytes 3,072 bytes 3.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5AAF93C9D4C1B4B2B1A6CE22015A6697
.tls 0x003eb000 9 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1F354D76203061BFDD5A53DAE48D5435
.rsrc 0x003ec000 9,504 bytes 9,728 bytes 3.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DE0533BE01515DA84A51391D4A2D114F
.reloc 0x003ef000 63,408 bytes 63,488 bytes 6.59 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D68B483136E2B74CB94A4EDEFCB63443
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 25 (8,074 bytes)
Resource Type Count Total Size Percentage
RT_ICON 2 1,040 bytes
12.9%
RT_DIALOG 4 2,048 bytes
25.4%
RT_STRING 16 2,766 bytes
34.3%
RT_GROUP_ICON 1 34 bytes
0.4%
RT_VERSION 1 684 bytes
8.5%
RT_MANIFEST 1 1,502 bytes
18.6%

Certificate Chain Analysis

▼
Certificate Information
Product Application Entertaining
Description Application Entertaining
File Version 1.0.0.0
Copyright Copyright 2014-2025 Entertaining Bread
Certificate Chain Summary
GlobalSign GCC R45 EV CodeSigning CA 2020 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
Online Investment Opportunities, LLC #2 Chain
Validity Period: 2024-07-10 18:37:13 → 2025-07-11 18:37:13
Signature Algorithm: sha256RSA
Serial Number: 6B 9D DE 71 EE 69 5B 35 A0 CA 91 09
Globalsign TSA for CodeSign1 - R6 #3 Chain
Validity Period: 2025-04-11 14:47:39 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 00 0B 20 05 B3 94 07 62 DB 3E 36 79 94 9B A9
GlobalSign Timestamping CA - SHA384 - G4 #4 Chain
Validity Period: 2018-06-20 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 EC 1C 92 40 DE FD 2E 40 5D 7C 47 74
GlobalSign #5 Chain
Validity Period: 2014-12-10 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 45 E6 BB 03 83 33 C3 85 65 48 E6 FF 45 51

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
14 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware