WinMerge 2 16 52 x64 Setup exe (WinMerge Installer) https://winmerge org 文件恶意软件分析

WinMerge-2.16.52-x64-Setup.exe (WinMerge Installer) 文件分析

更新于 2 months ago

检查者 Malware Check

WinMerge-2.16.52-x64-Setup.exe

哈希类型	值	操作
MD5	1705cce092d60ac1835e36c497492d19
SHA1	fa43907d10e2cf37a6c2ad8cc01dcc6c5cb8621f
SHA256	8643aa9937f02def3da161ab11e04d1f45a7961f60a47d1358e36f0dbdb6289e
SHA512	7485965359354067c179f469ad3de611cd1c66ac9ea73fece6ce01911504ce50a3f0dd3a9da6f333d14a3ed6dc3cc51e0e9f9785d4a192a633b2d4b5dea821e0
ImpHash	20dd26497880c05caed9305b3c8b9109

哈希类型

值

操作

MD5

1705cce092d60ac1835e36c497492d19

SHA1

fa43907d10e2cf37a6c2ad8cc01dcc6c5cb8621f

SHA256

8643aa9937f02def3da161ab11e04d1f45a7961f60a47d1358e36f0dbdb6289e

SHA512

7485965359354067c179f469ad3de611cd1c66ac9ea73fece6ce01911504ce50a3f0dd3a9da6f333d14a3ed6dc3cc51e0e9f9785d4a192a633b2d4b5dea821e0

ImpHash

20dd26497880c05caed9305b3c8b9109

PE 分析

基本信息

▼

图标	哈希: 30adcb5c0b2e3c35eaec2c110733c9f8 模糊: c98f96d6ffe5af8d4eb0870c1dc20826 dHash: 92e0b496a6cada72
映像基址	`0x00400000`
入口点	`0x004117dc`
编译时间	2016-04-06 14:39:04
校验和	0x00bd8bb9 (实际: 0x00bd8bb9)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	An error occurred while validating the countersignature: The root Certum Trusted Network CA 2 lists its extended key usages, but {'time_stamping'} are not present
导入	5 库 oleaut32, advapi32, user32, kernel32, comctl32
导出	0 函数
资源	17 资源
节	8 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	https://winmerge.org
FileDescription	WinMerge Installer
FileVersion	2.16.52.0
LegalCopyright	(c) 1996-2025 Dean P. Grimm / Thingamahoochie Software
ProductName	WinMerge
ProductVersion	2.16.52.0
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	62,020 bytes	62,464 bytes	6.38 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A33E9FF7181115027D121CD377C28C8F`
`.itext`	`0x00011000`	3,940 bytes	4,096 bytes	5.73 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CAEC456C18277B579A94C9508DAF36EC`
`.data`	`0x00012000`	3,208 bytes	3,584 bytes	2.30 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`746954890499546D73DCE0E994642192`
`.bss`	`0x00013000`	22,204 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00019000`	3,588 bytes	4,096 bytes	4.60 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E9B9C0328FD9628AD4D6AB8283DCB20E`
`.tls`	`0x0001a000`	8 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0001b000`	24 bytes	512 bytes	0.20 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3DFFC444CCC131C9DCEE18DB49EE6403`
`.rsrc`	`0x0001c000`	45,568 bytes	45,568 bytes	4.15 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FED21E898EB9992102AF272DB51A702A`

资源分析

▼

资源总数: 17 (44,126 字节)

资源类型	数量	总大小	百分比
RT_ICON	4	4,640 字节	10.5%
RT_STRING	6	2,668 字节	6%
RT_RCDATA	4	33,908 字节	76.8%
RT_GROUP_ICON	1	62 字节	0.1%
RT_VERSION	1	1,268 字节	2.9%
RT_MANIFEST	1	1,580 字节	3.6%

证书链分析

▼

证书 Information

产品	WinMerge
描述	WinMerge Installer
文件版本	2.16.52.0
签名日期	10:57 AM 10/27/2025 (75 天前)
验证状态	Signed
签名者	Takashi Sawanaka; Certum Code Signing 2021 CA; Certum Trusted Network CA 2; Certum Trusted Network CA
副签名者	Certum Timestamp 2025; Certum Timestamping 2021 CA; Certum Trusted Network CA 2; Certum Trusted Network CA
版权	(c) 1996-2025 Dean P. Grimm / Thingamahoochie Software

证书链摘要

Certum Trusted Network CA 2 #1 主要

有效期: 2021-05-31 06:43:06 → 2029-09-17 06:43:06

签名算法: sha384RSA

序列号: 1B B5 8F 25 2A DF 23 00 49 28 C9 AE 3D 7E ED 27

Takashi Sawanaka #2 链

有效期: 2024-10-18 11:02:20 → 2027-10-18 11:02:19

签名算法: sha256RSA

序列号: 3C C2 AC 32 38 8A F4 7F D7 30 02 18 8B EA B7 BE

Certum Timestamp 2025 #3 链

有效期: 2025-01-09 08:40:43 → 2036-01-07 08:40:43

签名算法: sha384RSA

序列号: 9E 9C 04 F6 55 A8 B4 A7 02 6D 49 8C 6C 78 8D AA

Certum Code Signing 2021 CA #4 链

有效期: 2021-05-19 05:32:18 → 2036-05-18 05:32:18

签名算法: sha384RSA

序列号: 99 A3 80 0A 26 55 3B 65 AB DC 6E 84 A6 B3 EA 39

Certum Timestamping 2021 CA #5 链

有效期: 2021-05-19 05:32:07 → 2036-05-18 05:32:07

签名算法: sha384RSA

序列号: E7 FF 69 C7 3B 35 CE 4B 91 26 D8 74 7C 68 A5 87

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

An error occurred while validating the countersignature: The root Certum Trusted Network CA 2 lists its extended key usages, but {'time_stamping'} are not present

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	WinMerge-2.16.52-x64-Setup.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.228.174
数据库版本	2025-10-29 11:00:21 UTC

WinMerge-2.16.52-x64-Setup.exe (WinMerge Installer) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别

PE 分析

基本信息

版本信息

PE 节

资源分析

证书链分析

证书 Information

证书链摘要

证书验证状态

记住：这是在线病毒扫描器的结果

保护您的系统

发表评论

Gridinsoft Anti-Malware