The 最新稳定版 exe 360 cn File Malware Analysis

The 最新稳定版.exe File Analysis

Updated 23 days ago

Checked by Malaware Check

最新稳定版.exe

Hash Type	Value	Action
MD5	0f3536e75fb7aaabb420e5a0b8f8bcad
SHA1	d06173438ecebf3068ca5f8a1bbd9587b0ab054e
SHA256	fa84d3313735448204446e6769fb5435854896e3d0a4c888de34111e654d8c04
SHA512	e5f673f4b92f5bd0c0a5212683aad138c388bf6c72e690d306fcf873eaf4260e3a4313e38805b1e46c2e9312e2f1c6cc9930b94ef48e2ca87aace69b2b752db4
ImpHash	22c67069e019fd068a56e96f40392001

Hash Type

Value

Action

MD5

0f3536e75fb7aaabb420e5a0b8f8bcad

SHA1

d06173438ecebf3068ca5f8a1bbd9587b0ab054e

SHA256

fa84d3313735448204446e6769fb5435854896e3d0a4c888de34111e654d8c04

SHA512

e5f673f4b92f5bd0c0a5212683aad138c388bf6c72e690d306fcf873eaf4260e3a4313e38805b1e46c2e9312e2f1c6cc9930b94ef48e2ca87aace69b2b752db4

ImpHash

22c67069e019fd068a56e96f40392001

PE Analysis

Basic Information

▼

Icon	Hash: 24cdab90f51ae80a72a78454a71f244a Fuzzy: cd597e4f78b16033eb14f3a6f9689b3f dHash: f8f0babeceaab29e
Image Base	`0x00400000`
Entry Point	`0x0044f7a5`
Compilation Time	2025-01-06 09:48:38
Checksum	0x00400782 (Actual: 0x00804c99)
OS Version	5.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`C:\vmagent_new\bin\joblist\861621\out\Release\CPInstaller.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	13 libraries
Exports	0 functions
Resources	127 Resources
Sections	5 Sections

Version Information

▼

CompanyName	360.cn
FileDescription	360装机必备集合包
FileVersion	1.0.0.1171
InternalName	CPInstaller.exe
LegalCopyright	(C) 360.cn Inc. All Rights Reserved.
OriginalFilename	CPInstaller.exe
ProductName	360装机必备集合包
ProductVersion	1.0.0.1171
Translation	0x0804 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	430,360 bytes	430,592 bytes	6.65 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`187ACE6DF696C93AD2C7D512EF861FAA`
`.rdata`	`0x0006b000`	86,060 bytes	86,528 bytes	4.80 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`EC3E8E911D783146B62DB9448171A9F2`
`.data`	`0x00081000`	32,512 bytes	17,920 bytes	3.33 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`0264165FD01C03E183C53A487EC57E98`
`.rsrc`	`0x00089000`	7,812,256 bytes	7,812,608 bytes	7.21 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7ED339D1813A3F60452ED484DE1A767B`
`.reloc`	`0x007fd000`	38,972 bytes	39,424 bytes	4.49 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`5ABADD4C8C3B879EF888E42A35BA0FA5`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 127 (7,805,564 bytes)

Resource Type	Count	Total Size	Percentage
AFX_DIALOG_LAYOUT	1	2 bytes	0%
CAB	2	843,048 bytes	10.8%
DLL	2	2,654,656 bytes	34%
INI	1	329 bytes	0%
PNG	37	60,279 bytes	0.8%
PRODUCT_EXE	36	288 bytes	0%
PRODUCT_ICON	36	52,978 bytes	0.7%
SETUP	1	4,168,672 bytes	53.4%
XML	1	9,352 bytes	0.1%
RT_ICON	1	9,640 bytes	0.1%
RT_DIALOG	5	3,852 bytes	0%
RT_STRING	1	136 bytes	0%
RT_GROUP_ICON	1	20 bytes	0%
RT_VERSION	1	752 bytes	0%
RT_MANIFEST	1	1,560 bytes	0%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	最新稳定版.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.216.174
Database Version	2025-05-14 18:00:24 UTC

The 最新稳定版.exe File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification