Gridinsoft Logo
File Icon

The unlocker installer lite.exe File Analysis

Updated 1 year ago
Checked by Malaware Check
unlocker installer lite.exe

Technical Analysis

File Name unlocker installer lite.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
SSDEEP Hash
12288:InRsqzw1uXjNp8Fzq1g384XYoliFKmZsh:IRBzyuTW+KBl3o4
Scanner Version 1.0.170.174
Database Version 2024-04-02 14:00:45 UTC
⚠

Suspicious File Detected

Detected by 30 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
43%
Detection Rate
402,911
File Size (bytes)
30/69
Engines Detected
2024-04-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
33408f35623dc5bb4a3bde09fa45f86b
SHA1
73c98f1721958026beb496bfcf15fb9a28b3b7a0
SHA256
b3284358029388637e642077f99e81e81144d8dab2f2623e263dbb5b625be746
SHA512
9ebd1b5c2622efa4bb001388ee37c7057ea2477e4e7303d555f60c05ca015f102f2cd7fe4d6d48f7254f725c9c6abfe630ab75446d3eb0e8fcf8e9ef7836ff01
ImpHash
7fa974366048f9c551ef45714595665e

Security Engines with Detections (30 of 69)

Bkav
W32.AIDetectMalware Malicious
Lionic
Adware.Win32.Somoto.2!c Malicious
Elastic
malicious (high confidence) Malicious
MicroWorld-eScan
Application.Bundler.Somoto.BR Malicious
FireEye
Application.Bundler.Somoto.BR Malicious
Skyhigh
BehavesLike.Win32.Dropper.fc Malicious
Cylance
unsafe Malicious
CrowdStrike
win/grayware_confidence_100% (W) Malicious
Arcabit
Application.Bundler.Somoto.BR Malicious
ESET-NOD32
Win32/DownWare.L potentially unwanted Malicious
Cynet
Malicious (score: 100) Malicious
BitDefender
Application.Bundler.Somoto.BR Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
DrWeb
Adware.Downware.12485 Malicious
TrendMicro
PUA_TOMOS.GB Malicious
Emsisoft
Application.Bundler.Somoto.BR (B) Malicious
Webroot
Pua.Gen Malicious
Google
Detected Malicious
Antiy-AVL
RiskWare/Win32.Downware Malicious
Kingsoft
malware.kb.a.916 Malicious
Xcitium
ApplicUnwnt@#2klzb5i5rfp5r Malicious
Microsoft
PUADlManager:Win32/Somoto Malicious
ViRobot
Adware.Webdevaz.402911 Malicious
GData
NSIS.Application.Somoto.Z Malicious
McAfee
Generic pup.cpb Malicious
VBA32
Adware.Downware Malicious
TrendMicro-HouseCall
PUA_TOMOS.GB Malicious
Rising
Adware.InstallMonetizer/NSIS!1.E002 (CLASSIC) Malicious
Yandex
Trojan.Igent.bYChGq.3 Malicious
Fortinet
Riskware/Downware Malicious
39 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 30adcb5c0b2e3c35eaec2c110733c9f8
Fuzzy: c98f96d6ffe5af8d4eb0870c1dc20826
dHash: 92e0b496a6cada72
Image Base 0x00400000
Entry Point 0x004030cb
Compilation Time 2009-12-05 22:50:41
Checksum 0x00000000 (Actual: 0x0006772c)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature The PE file does not contain a certificate table.
Imports 8 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION
Exports 0 functions
Resources 53 Resources
Sections 5 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 22,738 bytes 23,040 bytes 6.43 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C69726ED422D3DCFDEC9731986DAA752
.rdata 0x00007000 4,496 bytes 4,608 bytes 5.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A2C7710FA66FCBB43C7EF0AB9EEA5E9A
.data 0x00009000 110,456 bytes 1,024 bytes 4.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E59CDCB732E4BFBC84CC61DD68354F78
.ndata 0x00024000 176,128 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x0004f000 22,632 bytes 23,040 bytes 3.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 91F21D9E2699765FE275B5F02060E579

Resource Analysis

▼
Total Resources: 53 (19,830 bytes)
Resource Type Count Total Size Percentage
RT_BITMAP 1 1,638 bytes
8.3%
RT_ICON 2 3,600 bytes
18.2%
RT_DIALOG 48 13,600 bytes
68.6%
RT_GROUP_ICON 1 34 bytes
0.2%
RT_MANIFEST 1 958 bytes
4.8%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
30 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware