The 园区暴打分尸视频曝光 exe (Setup Application) File Malware Analysis
Gridinsoft Logo
File Icon

The 园区暴打分尸视频曝光.exe (Setup Application) File Analysis

Updated 1 month ago
Checked by Malware Check
园区暴打分尸视频曝光.exe

Technical Analysis

File Name 园区暴打分尸视频曝光.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
49152:WVN26FOnzGn6LJvqkwnpC+mud6uIccRrwR04fnteUT21fEOte6nH5Fbn:WV06FOznLo0+bd6uxcCO4fnsUSl1txnL
Scanner Version 1.0.230.174
Database Version 2025-12-05 08:00:22 UTC
⚠

Suspicious File Detected

Detected by 28 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
39%
Detection Rate
2,885,848
File Size (bytes)
28/72
Engines Detected
2025-12-05
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
62ebedb3478956c3d8afd267f95d38d0
SHA1
d905d1c80b38baf4076db200efd9a7ec0db57ed7
SHA256
dfef6a2c2748e024fa617ae8ea5d3a8f5a72246c3d16691b38f20fb42633b2fb
SHA512
d91a7df2cc52c0ea403f5265841c0aac3002b9102bc4fecadbd30dd908644fece58f11f3e2a512a9ee70db5eb60426fa8aa65eaaa01d3ff4eb2ff34e4388ebf1
ImpHash
1ff847646487d56f85778df99ff3728a

Security Engines with Detections (28 of 72)

Bkav
W32.AIDetectMalware Malicious
MicroWorld-eScan
Gen:Variant.Fugrafa.347928 Malicious
CTX
exe.unknown.fugrafa Malicious
ALYac
Gen:Variant.Fugrafa.347928 Malicious
Cylance
Unsafe Malicious
BitDefender
Gen:Variant.Fugrafa.347928 Malicious
CrowdStrike
win/malicious_confidence_60% (W) Malicious
Elastic
malicious (moderate confidence) Malicious
ESET-NOD32
Win32/ShellcodeRunner.AAX trojan Malicious
Cynet
Malicious (score: 100) Malicious
Kaspersky
UDS:Trojan.Win32.GenericML.xnet Malicious
Rising
Trojan.Generic!8.C3 (CLOUD) Malicious
F-Secure
Trojan.TR/Farfli.zvmkr Malicious
VIPRE
Gen:Variant.Fugrafa.347928 Malicious
Emsisoft
Gen:Variant.Fugrafa.347928 (B) Malicious
Ikarus
Trojan.Win32.Farfli Malicious
GData
Gen:Variant.Fugrafa.347928 Malicious
Avira
TR/Farfli.zvmkr Malicious
Arcabit
Trojan.Fugrafa.D54F18 Malicious
Google
Detected Malicious
AhnLab-V3
Malware/Win.Generic.C5205210 Malicious
VBA32
BScope.Trojan.Downloader Malicious
DeepInstinct
MALICIOUS Malicious
Malwarebytes
Malware.AI.4282309558 Malicious
APEX
Malicious Malicious
Tencent
Backdoor.Win32.Phish.16002876 Malicious
AVG
Win32:MalwareX-gen [Misc] Malicious
Avast
Win32:MalwareX-gen [Misc] Malicious
44 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: e257e7d5508de58a33d06852177b2ae5
Fuzzy: a47aea7aa3e81d4e54f4b68e6ee83dc4
dHash: cc8e8e8e8e9686e4
Image Base 0x00400000
Entry Point 0x004029e1
Compilation Time 2012-06-14 16:16:10
Checksum 0x0001b89e (Actual: 0x002cec3e)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 4 libraries
KERNEL32, USER32, ADVAPI32, SHELL32
Exports 0 functions
Resources 13 Resources
Sections 5 Sections

Version Information

▼
Comments Created with Setup Factory
FileDescription Setup Application
FileVersion 9.1.0.0
InternalName suf_launch
LegalCopyright Setup Engine Copyright © 2004-2012 Indigo Rose Corporation
LegalTrademarks Setup Factory is a trademark of Indigo Rose Corporation.
OriginalFilename suf_launch.exe
ProductName Setup Factory Runtime
ProductVersion 9.1.0.0
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 22,296 bytes 22,528 bytes 6.46 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C76B9CE587690B8A39BA7840B7DD540C
.rdata 0x00007000 11,906 bytes 12,288 bytes 4.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E96AA4F970E6F6799910A72904DF3100
.data 0x0000a000 6,504 bytes 3,072 bytes 2.59 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E504FDBBA062EE9BBD9AC425A4F5C0F5
.rsrc 0x0000c000 95,784 bytes 96,256 bytes 6.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D9FD29DD0DE6B114B5309EB7C70E38FA
.reloc 0x00024000 4,242 bytes 4,608 bytes 3.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ A88BDB6F651ECF67B1B3DB4A2866EA4E

Resource Analysis

▼
Total Resources: 13 (95,045 bytes)
Resource Type Count Total Size Percentage
RT_ICON 10 92,688 bytes
97.5%
RT_GROUP_ICON 1 146 bytes
0.2%
RT_VERSION 1 992 bytes
1%
RT_MANIFEST 1 1,219 bytes
1.3%

Certificate Chain Analysis

▼
Certificate Information
Product Setup Factory Runtime
Description Setup Application
File Version 9.1.0.0
Original Name suf_launch.exe
Internal Name suf_launch
Copyright Setup Engine Copyright © 2004-2012 Indigo Rose Corporation
Certificate Chain Summary
COMODO Time Stamping Signer #1 Primary
Validity Period: 2010-05-10 00:00:00 → 2015-05-10 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 47 8A 8E FB 59 E1 D8 3F 0C E1 42 D2 A2 87 07 BE
Indigo Rose Software Design Corporation #2 Chain
Validity Period: 2011-03-01 00:00:00 → 2014-02-28 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 73 6F 48 4C 38 26 9B F8 C4 42 73 1C 1F AC A3 ED

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
28 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware