Gridinsoft Logo
File Icon

The just.exe (InstallKit 2.5c) File Analysis

Updated 4 days ago
Checked by Malware Check
just.exe

Technical Analysis

File Name just.exe
File Type
Win32 EXE
Magic Bytes PE32 executable for MS Windows (GUI) Intel 80386 32-bit
SSDEEP Hash
3072:i5PkEwkLRjvlTUc5b9LD/h27xJ/NHRJ5fwAzGkBJS5+WBuzCgvlhcsU:GPpwwJlTUKhX4ZHR3/zGsbKPgv7TU
Scanner Version 1.0.222.174
Database Version 2025-07-29 09:00:17 UTC
⚠

Suspicious File Detected

Detected by 52 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
74%
Detection Rate
203,939
File Size (bytes)
52/70
Engines Detected
2025-07-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
26b4d8131bd2d3d94aec5adf2c2f934d
SHA1
cd92154a5af592a4bd5b74a99099d85991bb5a9a
SHA256
f1a281be121db249c4748e43be9eafd564495d9885009baa68155d158fecb73d
SHA512
14c24c10f554934f0f2c191e53ba09aeac39ec7c98c0885eddf8ca70ab6d15053a7f8dcd0f1ca33e42efe46cfb9acf6b2880c034bc03ec4304c0205e206fc5d3
ImpHash
2e486b010e9a39fcfa5e3d96bff70c99

Security Engines with Detections (52 of 70)

Bkav
W32.AIDetectVM.malware1 Malicious
DrWeb
BAT.Autoruner.40 Malicious
MicroWorld-eScan
Trojan.Generic.10313053 Malicious
FireEye
Generic.mg.26b4d8131bd2d3d9 Malicious
CAT-QuickHeal
Worm.AutoRun Malicious
McAfee
Generic.rx Malicious
Cylance
Unsafe Malicious
VIPRE
Trojan.Win32.Generic!BT Malicious
K7AntiVirus
Riskware ( 0040f0f51 ) Malicious
BitDefender
Trojan.Generic.10313053 Malicious
K7GW
Riskware ( 0040f0f51 ) Malicious
Arcabit
Trojan.Generic.D9D5D5D Malicious
TrendMicro
TROJ_WC.F0BEE05CI14 Malicious
Cyren
W32/Trojan.NOTB-1986 Malicious
Symantec
Trojan.Zbot Malicious
TotalDefense
Win32/Tnega.FAfaUeC Malicious
Zoner
Trojan.VBS.20941 Malicious
APEX
Malicious Malicious
Avast
Unix:Malware-gen Malicious
Kaspersky
Worm.Win32.AutoRun.idj Malicious
Alibaba
Worm:Win32/Autoit.217dd598 Malicious
NANO-Antivirus
Trojan.Win32.AutoRun.cuizxe Malicious
Lionic
Worm.Win32.AutoRun.o!c Malicious
Rising
Worm.Win32.Autorun.tyo (CLASSIC) Malicious
Ad-Aware
Trojan.Generic.10313053 Malicious
Sophos
NirCmd (PUA) Malicious
Comodo
Malware@#h3vkijv1xfhq Malicious
F-Secure
Trojan.TR/AutoIt.NJ Malicious
Invincea
Mal/Generic-L Malicious
McAfee-GW-Edition
Generic.rx Malicious
Emsisoft
Trojan.Generic.10313053 (B) Malicious
Webroot
W32.Malware.Heur Malicious
Avira
TR/AutoIt.NJ Malicious
Microsoft
Worm:Win32/Autorun.XGM Malicious
SUPERAntiSpyware
Trojan.Agent/Gen-Inject Malicious
ZoneAlarm
Worm.Win32.AutoRun.idj Malicious
GData
Win32.Trojan.Agent.2398W8 Malicious
Cynet
Malicious (score: 85) Malicious
VBA32
Trojan.KillFiles Malicious
ALYac
Trojan.Generic.10313053 Malicious
MAX
malware (ai score=100) Malicious
Panda
Trj/WLT.A Malicious
TrendMicro-HouseCall
TROJ_WC.F0BEE05CI14 Malicious
ESET-NOD32
Win32/Autoit.JN Malicious
Tencent
Win32.Worm.Autorun.Hsiu Malicious
Yandex
Trojan.Autorun.Gen.DK Malicious
Ikarus
Win32.Malware Malicious
Fortinet
W32/AutoIt.JN!tr Malicious
AVG
Unix:Malware-gen Malicious
Cybereason
malicious.31bd2d Malicious
Paloalto
generic.ml Malicious
Qihoo-360
Trojan.Generic Malicious
18 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 3a85aabaa54af40309db5b8fee38e85d
Fuzzy: 36f186e83112951f053c0a59f90a9c72
dHash: c08084c4dcd8b23a
Image Base 0x00400000
Entry Point 0x0044c214
Compilation Time 2000-05-09 00:28:16
Checksum 0x00000000 (Actual: 0x00037414)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 9 libraries
KERNEL32, USER32, GDI32, comdlg32, WINSPOOL, ADVAPI32, SHELL32, COMCTL32, OLEAUT32
Exports 0 functions
Resources 30 Resources
Sections 5 Sections

Version Information

▼
CompanyName Epsilon Squared, Inc.
FileDescription InstallKit 2.5c
FileVersion 2.5c
InternalName InstallKit 2.5c
LegalCopyright Copyright (C) 1998-2000 Gavin E. Stark
OriginalFilename
ProductName InstallKit 2.5c
ProductVersion 2.5c\0
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 184,320 bytes 184,320 bytes 7.80 (Packed/Encrypted) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C4449921D21BB24E7DCEBA25B5F94CCF
.rdata 0x0002e000 32,768 bytes 32,768 bytes 5.85 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ C78677FF45068ED19BB0F40B24BFE1CA
.data 0x00036000 33,532 bytes 4,096 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 620F0B67A91F7F74151BC5BE745B7110
.rsrc 0x0003f000 52,760 bytes 4,096 bytes 3.56 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 37E6C567F3D34F8BDFC9DE2D6A66D3F0
.neolit 0x0004c000 25,108 bytes 6,916 bytes 6.60 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F7631115DEF479C33FA7C6407880ACAE
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 30 (50,966 bytes)
Resource Type Count Total Size Percentage
AVI 3 39,592 bytes
77.7%
RT_CURSOR 2 488 bytes
1%
RT_BITMAP 4 2,380 bytes
4.7%
RT_ICON 1 744 bytes
1.5%
RT_DIALOG 4 1,404 bytes
2.8%
RT_STRING 13 5,556 bytes
10.9%
RT_GROUP_CURSOR 1 34 bytes
0.1%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 748 bytes
1.5%

Certificate Chain Analysis

▼
Certificate Information
Product InstallKit 2.5c
Description InstallKit 2.5c
File Version 2.5c
Internal Name InstallKit 2.5c
Copyright Copyright (C) 1998-2000 Gavin E. Stark

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
52 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware