Wmvtomp4 setup exe (This installer database contains the logic and data required to install Free WMV To MP4 Converter ) convertaudiofree 文件恶意软件分析

Wmvtomp4_setup.exe (This installer database contains the logic and data required to install Free WMV To MP4 Converter.) 文件分析

更新于 3 months ago

检查者 Malaware Check

wmvtomp4_setup.exe

哈希类型	值	操作
MD5	8d493d1b57841f3af29677d91fa53e5d
SHA1	a31a20a1faa258c833a244f234f5e3b56de1e533
SHA256	184637230221098dbed0001b28b3b24adbe242acca1587b9b7b9d14ddcc12b8a
SHA512	3940276409f30bf24db718b11a72e362907e6ccce0b1592520f0c59084a2c1c81a5ee39581f8a74d3a7bd89d1493b05b0a399462cfd4a3f8f8c4f33f124995f3
ImpHash	367ef497842f3d7ca9c9634d4bb03143

哈希类型

值

操作

MD5

8d493d1b57841f3af29677d91fa53e5d

SHA1

a31a20a1faa258c833a244f234f5e3b56de1e533

SHA256

184637230221098dbed0001b28b3b24adbe242acca1587b9b7b9d14ddcc12b8a

SHA512

3940276409f30bf24db718b11a72e362907e6ccce0b1592520f0c59084a2c1c81a5ee39581f8a74d3a7bd89d1493b05b0a399462cfd4a3f8f8c4f33f124995f3

ImpHash

367ef497842f3d7ca9c9634d4bb03143

PE 分析

基本信息

▼

图标	哈希: 9919e82e0796bfb21aef5d6259c41778 模糊: 51a3216a281c5166e2b45f84000d7e47 dHash: f0d8e6f29898c0e4
映像基址	`0x00400000`
入口点	`0x004ab509`
编译时间	2012-10-18 10:04:11
校验和	0x0013ebc5 (实际: 0x00ffc70e)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB 路径	`D:\BranchAI\win\Release\stubs\x86u\ExternalUi.pdb`
数字签名	No valid SignedData structure was found.
导入	14 库
导出	0 函数
资源	52 资源
节	5 节

版本信息

▼

CompanyName	convertaudiofree
FileDescription	This installer database contains the logic and data required to install Free WMV To MP4 Converter.
FileVersion	1.0.0
InternalName	setup
LegalCopyright	Copyright (C) convertaudiofree
OriginalFileName	setup.exe
ProductName	Free WMV To MP4 Converter
ProductVersion	1.0.0
Translation	0x0409 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	905,665 bytes	905,728 bytes	6.62 (压缩)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2A770BA7EF138FFD6F32444308952280`
`.rdata`	`0x000df000`	222,928 bytes	223,232 bytes	4.43 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`9590EA43D2CB0137347A862BA30C7F6A`
`.data`	`0x00116000`	36,964 bytes	12,288 bytes	4.26 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`0C1EC9E009CB45B46960353B64BCC2C3`
`.rsrc`	`0x00120000`	107,412 bytes	107,520 bytes	5.86 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C08E8316D29A8CB5E93C8D0A3825B489`
`.reloc`	`0x0013b000`	87,496 bytes	87,552 bytes	5.18 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`7CA9C710310D6BCD32EDF33A7167BDAA`

熵分析警报

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 52 (104,580 字节)

资源类型	数量	总大小	百分比
IMAGE_FILE	2	24,654 字节	23.6%
RTF_FILE	2	906 字节	0.9%
RT_BITMAP	6	26,098 字节	25%
RT_ICON	12	29,728 字节	28.4%
RT_MENU	2	134 字节	0.1%
RT_DIALOG	13	5,774 字节	5.5%
RT_STRING	12	15,020 字节	14.4%
RT_GROUP_ICON	1	174 字节	0.2%
RT_VERSION	1	908 字节	0.9%
RT_MANIFEST	1	1,184 字节	1.1%

证书链分析

▼

证书 Information

产品	Free WMV To MP4 Converter
描述	This installer database contains the logic and data required to install Free WMV To MP4 Converter.
文件版本	1.0.0
原始名称	setup.exe
内部名称	setup
版权	Copyright (C) convertaudiofree

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	wmvtomp4_setup.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.209.174
数据库版本	2025-03-02 10:00:38 UTC

Wmvtomp4_setup.exe (This installer database contains the logic and data required to install Free WMV To MP4 Converter.) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别