Gridinsoft Logo
File Icon

The kaspersky4win202121.19.7.527abes_46445.exe File Analysis

Technical Analysis

File Name kaspersky4win202121.19.7.527abes_46445.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.213.174
Database Version 2025-04-11 02:00:20 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
4,719,880
File Size (bytes)
2025-04-11
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
0e0d1aa5ec159bde8b00e041d45abd45
SHA1
718a17b661296b82768846f786dc828db5d6274d
SHA256
edf5f19f400f6993e23f88040ec77783b5eff95653970c16a0ae26fdfa4014c2
SHA512
3bfda5f711b7f66cdb1fdb18edb460471dec58b3e8c4390edb4e02a6d52a5f8b43ead50b24dea7efc0edeff5d7f4a82ec5b42a6ffb135d9bf4f3ededc11d1213
ImpHash
3b629027afbe60960e4099d322d33917

PE Analysis

Basic Information

Icon
Hash: ef82e732356f511d4f52114a73b46a32
Fuzzy: 3b4b79729883f89ca608d3c14f8141a0
dHash: 70e0f8fc9c9af870
Image Base 0x00400000
Entry Point 0x00403ae0
Compilation Time 2024-10-15 22:09:47
Checksum 0x0048f41b (Actual: 0x0048aeb3)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\a\b\d_00000000_\b\b\execroot\k\bazel-out\x86_32-windows-opt-ST-bd47c771e5d9\bin\product\kavkis\PPP\Install\Setup\starter\setup.pdb
Digital Signature OK
Imports 1 libraries
KERNEL32
Exports 0 functions
Resources 34 Resources
Sections 6 Sections

Version Information

CompanyName Kaspersky
FileDescription Kaspersky [21.19.7.527.0.452.0 (a.b)]
FileVersion 21.19.7.527
LegalCopyright © 2024 AO Kaspersky Lab
LegalTrademarks Las marcas registradas y las marcas de servicio son propiedad de sus respectivos dueños
ProductName Kaspersky
ProductVersion 21.19.7.527
InternalName Setup
OriginalFilename Setup.exe
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 253,722 bytes 253,952 bytes 6.66 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 885A9A72A7BE340F0A60407CFE53033B
.rdata 0x0003f000 75,632 bytes 75,776 bytes 5.34 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5866DA10B7780D73EFBF21E5CE926759
.data 0x00052000 19,688 bytes 5,120 bytes 3.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F665C8A02EE62E6572E554F5C7E2D12A
.didat 0x00057000 64 bytes 512 bytes 0.56 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 195327481B00B0FCD47901FC161287DE
.rsrc 0x00058000 4,363,748 bytes 4,363,776 bytes 7.87 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 530F47AC52DBFA126E1909C7034BB4BA
.reloc 0x00482000 12,580 bytes 12,800 bytes 6.60 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 7B4F0DE902E0C1F98A7798C3EEFF8CB8
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 34 (4,360,820 bytes)
Resource Type Count Total Size Percentage
DOWNLOADER.INI 2 1,196 bytes
0%
SZIP 19 3,983,910 bytes
91.4%
WEVT_TEMPLATE 1 498 bytes
0%
RT_ICON 7 372,408 bytes
8.5%
RT_STRING 1 38 bytes
0%
RT_MESSAGETABLE 1 100 bytes
0%
RT_GROUP_ICON 1 104 bytes
0%
RT_VERSION 1 960 bytes
0%
RT_MANIFEST 1 1,606 bytes
0%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware