Gridinsoft Logo
File Icon

The ToolUnlock_v9.2.exe (Cakewalk Product Center Setup) File Analysis

Updated 2 months ago
Checked by Malware Check
ToolUnlock_v9.2.exe

Technical Analysis

File Name ToolUnlock_v9.2.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64, for MS Windows
SSDEEP Hash
49152:2va5ak6jaAh2Dt8GEBqaGd37wu2r9Zxld:2kMae0aGm7
Scanner Version 1.0.228.174
Database Version 2025-10-27 16:00:18 UTC
⚠

Suspicious File Detected

Detected by 9 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
13%
Detection Rate
3,092,792
File Size (bytes)
9/72
Engines Detected
2025-10-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2c574d18f2fd9890710a6c82b15f9030
SHA1
78e68d26e06caef173335004904c4261baa8c729
SHA256
ebbb079fb70564ff79df9f99d9d6f37d057d5242433091001946bbdcd4f7cb92
SHA512
3bcb0a58f6ca7c1561abefbe8ca41644909b56c878147f6d7bdd929dc0d3ee59347a5c19c110912a6c4656e7a8f76b3994b1c2c3cc24435bc886cb0d6527f3f7
ImpHash
d42595b695fc008ef2c56aabd8efd68e

Security Engines with Detections (9 of 72)

Bkav
W64.AIDetectMalware Malicious
Elastic
malicious (high confidence) Malicious
Kaspersky
HEUR:Trojan.Win64.Generic Malicious
McAfeeD
ti!EBBB079FB705 Malicious
Microsoft
Trojan:Win32/Sabsik.EN.A!ml Malicious
Google
Detected Malicious
DeepInstinct
MALICIOUS Malicious
Ikarus
Trojan.WinGo.Crypt Malicious
Fortinet
W64/GoKryptik.JY!tr Malicious
63 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 42fadcd67b29845390393559fd2c58e1
Fuzzy: ec55dff47740883c1b32573b78e8aae6
dHash: d08ea357292b8e70
Image Base 0x00400000
Entry Point 0x0046fc00
Compilation Time 1970-01-01 00:00:00
Checksum 0x002fbd72 (Actual: 0x002fbd72)
OS Version 6.1
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 1 libraries
kernel32
Exports 0 functions
Resources 23 Resources
Sections 9 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName BandLab Singapore Pte Ltd.
FileDescription Cakewalk Product Center Setup
FileVersion 1.0.0.096
LegalCopyright Copyright © 2023 BandLab Singapore Pte Ltd.
OriginalFileName
ProductName Cakewalk Product Center
ProductVersion 1.0.0.096
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 909,105 bytes 909,312 bytes 6.24 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7F5C7B9CCA79384E7602C0F51C12EFE9
.rdata 0x000df000 1,733,320 bytes 1,733,632 bytes 6.36 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 128474E526CF8E7B7E8F40E878205965
.data 0x00287000 354,304 bytes 55,808 bytes 3.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6B38A1A3ED4691F1E0870B950E0B5F60
.pdata 0x002de000 27,168 bytes 27,648 bytes 5.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B96B36D78FB0E4726E029CBF18292FAD
.xdata 0x002e5000 180 bytes 512 bytes 1.79 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DFFA7CB0351B9038389F7B764DD666D6
.idata 0x002e6000 1,342 bytes 1,536 bytes 3.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B68F2CDD81A84E883F96C04DD0A311F2
.reloc 0x002e7000 25,500 bytes 25,600 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 01E5F34C8113C821432A1671E1B9572F
.symtab 0x002ee000 4 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 07B5472D347D42780469FB2654B7FC54
.rsrc 0x002ef000 326,308 bytes 326,656 bytes 4.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DB5229FEC012F80B78F51B5BF2029E5A

Resource Analysis

▼
Total Resources: 23 (325,070 bytes)
Resource Type Count Total Size Percentage
RT_ICON 10 315,472 bytes
97%
RT_STRING 11 8,040 bytes
2.5%
RT_GROUP_ICON 1 146 bytes
0%
RT_VERSION 1 1,412 bytes
0.4%

Certificate Chain Analysis

▼
Certificate Information
Product Cakewalk Product Center
Description Cakewalk Product Center Setup
File Version 1.0.0.096
Signing Date 07:02 PM 08/14/2025 (148 days ago)
Verification Status The digital signature of the object did not verify.
Signers BandLab Singapore Pte. Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Copyright Copyright © 2023 BandLab Singapore Pte Ltd.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #3 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #4 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68
BandLab Singapore Pte. Ltd. #5 Chain
Validity Period: 2023-02-09 00:00:00 → 2026-03-06 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 06 66 B6 13 3B 96 81 1B 82 21 9F A1 42 5F 25 75

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
9 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware