MovaviScreenRecorderPortable exe (Movavi Screen Recorder Portable Launcher) https://joosengportableapp blogspot com 文件恶意软件分析

MovaviScreenRecorderPortable.exe (Movavi Screen Recorder Portable Launcher) 文件分析

更新于 3 months ago

检查者 Malware Check

MovaviScreenRecorderPortable.exe

哈希类型	值	操作
MD5	39c33cc35f77e8a4863c55a0f4888406
SHA1	efc8adace9420bf40bf614a418e775ce6894e764
SHA256	a6821d6fdf41e2b37c898039fe7a7633d98d7a6f478de1dbd7b07fde2681c578
SHA512	90aba2c8272e4477ad4f6c6356a5aa6ebc1d12c42ace97133a857333296da98472ce9b7f330d4e02ceee3516beae09fb235565c16611a4f7be2e290d6b471339
ImpHash	039d1617d5f0788dacbd04b35a141ebe

哈希类型

值

操作

MD5

39c33cc35f77e8a4863c55a0f4888406

SHA1

efc8adace9420bf40bf614a418e775ce6894e764

SHA256

a6821d6fdf41e2b37c898039fe7a7633d98d7a6f478de1dbd7b07fde2681c578

SHA512

90aba2c8272e4477ad4f6c6356a5aa6ebc1d12c42ace97133a857333296da98472ce9b7f330d4e02ceee3516beae09fb235565c16611a4f7be2e290d6b471339

ImpHash

039d1617d5f0788dacbd04b35a141ebe

PE 分析

基本信息

▼

图标	哈希: 27a50b5492fed712801ede9a6ca419b4 模糊: 831133f622559efd4805ad7f148e1a7b dHash: cca2f1e8f1b28c00
映像基址	`0x00400000`
入口点	`0x00403391`
编译时间	2014-08-20 15:40:56
校验和	0x00000000 (实际: 0x000883ac)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	8 库 KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION
导出	0 函数
资源	26 资源
节	6 节

版本信息

▼

Comments	A universal launcher for PortableApps.com applications.
CompanyName	https://joosengportableapp.blogspot.com
FileDescription	Movavi Screen Recorder Portable Launcher
FileVersion	2019.04.01.0
InternalName	PortableApps.com Launcher
LegalCopyright
LegalTrademarks
OriginalFilename	MovaviScreenRecorderPortable.exe
ProductName	Movavi Screen Recorder Portable
ProductVersion	2019.04.01.0
Translation	0x0000 0x04e6

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	25,660 bytes	26,112 bytes	6.45 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`1119D1FDEA75C18C9E0C7E73F2F4692A`
`.rdata`	`0x00008000`	5,602 bytes	5,632 bytes	5.36 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C1F010524AA72C9DFA053FEEB4230C31`
`.data`	`0x0000a000`	171,196 bytes	512 bytes	1.41 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CB4E90EBDC3ED58CA387027BC2AAD501`
`.ndata`	`0x00034000`	532,480 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x000b6000`	366,816 bytes	367,104 bytes	3.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3A6169611F2B4F6FFF93B43AC0E07255`
`.reloc`	`0x00110000`	3,008 bytes	3,072 bytes	0.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`D2A70550489DE356A2CD6BFC40711204`

资源分析

▼

资源总数: 26 (365,412 字节)

资源类型	数量	总大小	百分比
RT_ICON	8	360,384 字节	98.6%
RT_DIALOG	15	2,868 字节	0.8%
RT_GROUP_ICON	1	118 字节	0%
RT_VERSION	1	1,088 字节	0.3%
RT_MANIFEST	1	954 字节	0.3%

证书链分析

▼

证书 Information

产品	Movavi Screen Recorder Portable
描述	Movavi Screen Recorder Portable Launcher
文件版本	2019.04.01.0
原始名称	MovaviScreenRecorderPortable.exe
内部名称	PortableApps.com Launcher

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	MovaviScreenRecorderPortable.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.226.174
数据库版本	2025-09-27 23:00:20 UTC

MovaviScreenRecorderPortable.exe (Movavi Screen Recorder Portable Launcher) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别