The ERDIPTVM3UEditor exe (ERDIPTVM3UEditor) ERD Ernst Reidinga File Malware Analysis

The ERDIPTVM3UEditor.exe (ERDIPTVM3UEditor) File Analysis

Updated 7 months ago

Checked by Malware Check

ERDIPTVM3UEditor.exe

Hash Type	Value	Action
MD5	ce938b31819eeb25c5347ff266cb2911
SHA1	2e1743dc1c58a2d3698b9a451c241620bfcf1784
SHA256	fb9701f7a8d2878eeb5c5271552a4a6af0a6af070c59cd759f8145df956af820
SHA512	814d1f776f699679676f891a122b0ca6e168c3290ab2f78be9931c224ae1943464af611c8c86ac42342fe8e5a1aec43890c521dcfa641e120e60056039135c5a
ImpHash	b7dffe7f0437ee4218b947caeab28559

Hash Type

Value

Action

MD5

ce938b31819eeb25c5347ff266cb2911

SHA1

2e1743dc1c58a2d3698b9a451c241620bfcf1784

SHA256

fb9701f7a8d2878eeb5c5271552a4a6af0a6af070c59cd759f8145df956af820

SHA512

814d1f776f699679676f891a122b0ca6e168c3290ab2f78be9931c224ae1943464af611c8c86ac42342fe8e5a1aec43890c521dcfa641e120e60056039135c5a

ImpHash

b7dffe7f0437ee4218b947caeab28559

PE Analysis

Basic Information

▼

Icon	Hash: d81678349a6803e141626e0d58e99fe3 Fuzzy: d4c249a7689a8744e39fa2c946d14cfb dHash: c8d698aca4a0a899
Image Base	`0x00400000`
Entry Point	`0x00b14520`
Compilation Time	2019-01-23 02:54:00
Checksum	0x00000000 (Actual: 0x00ddc6a2)
OS Version	5.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	14 libraries
Exports	3 functions
Resources	453 Resources
Sections	11 Sections

Version Information

▼

CompanyName	ERD - Ernst Reidinga
FileDescription	ERDIPTVM3UEditor
FileVersion	1.1.0.59
InternalName	ERD IPTV M3U Editor
LegalCopyright	© 2018-2019 ERD - Ernst Reidinga
LegalTrademarks	© 2018-2019 ERD - Ernst Reidinga
OriginalFilename	M3UEditor.exe
ProgramID	com.embarcadero.ERDIPTVM3UEditor
ProductName	ERDIPTVM3UEditor
ProductVersion	1.1.0.0
Comments	This software is made by ERD - Ernst Reidinga. Please buy a license to support development of this tool.
Translation	0x0409 0x04e4

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	7,399,524 bytes	7,399,936 bytes	6.46 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CF3B6B8AEC8FA0579B5DFB4E12A83530`
`.itext`	`0x00710000`	18,624 bytes	18,944 bytes	6.27 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9C3C93E602D307AB17AF1E233D8F294A`
`.data`	`0x00715000`	168,868 bytes	168,960 bytes	5.65 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`DC37D1E12FF9827BC481F3E07080D97D`
`.bss`	`0x0073f000`	32,988 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00748000`	18,358 bytes	18,432 bytes	5.16 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`C0661C65A59E422338CC38E89BC488FF`
`.didata`	`0x0074d000`	2,910 bytes	3,072 bytes	4.05 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`DCD48D8301536D69FA29937B17FE2846`
`.edata`	`0x0074e000`	162 bytes	512 bytes	2.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A8AABB3706D84CF113664EE09668D1EE`
`.tls`	`0x0074f000`	88 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00750000`	112 bytes	512 bytes	1.66 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`514EA8AF50C0B6AA627ECBB02D90AE8A`
`.reloc`	`0x00751000`	673,832 bytes	674,304 bytes	6.70 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`3E481B05D9C63EF5ECF5475D78D08662`
`.rsrc`	`0x007f6000`	6,226,944 bytes	6,226,944 bytes	6.87 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5049CD2F8BBC64D6C72D42ED684F3613`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 453 (6,194,771 bytes)

Resource Type	Count	Total Size	Percentage
DXSKINS	2	3,811 bytes	0.1%
PNG	22	84,777 bytes	1.4%
SVG	1	623 bytes	0%
RT_CURSOR	89	802,324 bytes	13%
RT_BITMAP	132	173,600 bytes	2.8%
RT_ICON	6	119,511 bytes	1.9%
RT_STRING	86	86,708 bytes	1.4%
RT_RCDATA	76	4,918,942 bytes	79.4%
RT_GROUP_CURSOR	36	1,462 bytes	0%
RT_GROUP_ICON	1	90 bytes	0%
RT_VERSION	1	1,228 bytes	0%
RT_MANIFEST	1	1,695 bytes	0%

Certificate Chain Analysis

▼

Certificate Information

Product	ERDIPTVM3UEditor
Description	ERDIPTVM3UEditor
File Version	1.1.0.59
Original Name	M3UEditor.exe
Internal Name	ERD IPTV M3U Editor
Copyright	© 2018-2019 ERD - Ernst Reidinga

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	ERDIPTVM3UEditor.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.216.174
Database Version	2025-05-07 13:00:21 UTC

The ERDIPTVM3UEditor.exe (ERDIPTVM3UEditor) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification