FilmoraPortable exe (Wondershare Filmora Portable Launcher) lrepacks ru / Skinny 文件恶意软件分析

FilmoraPortable.exe (Wondershare Filmora Portable Launcher) 文件分析

更新于 2 months ago

检查者 Malware Check

FilmoraPortable.exe

哈希类型	值	操作
MD5	5ea1a2575ae5ad0f8a3937e5e6df283b
SHA1	099708032d8671e945056b60e03a096de4ab41a9
SHA256	d8ecd4cbd92e805cb866c08abb477e508b619c97a9039f31bc384b540857482a
SHA512	729779359449783c754c4d8e949c133c7491c5881cd8a36c68d952283393e0c0b128486d3d40a1dd381e00ed8cc2fca9bdcedbf5eeb22b9ee45464a1b363e03a
ImpHash	f251951da7a0c1575236301f43162251

哈希类型

值

操作

MD5

5ea1a2575ae5ad0f8a3937e5e6df283b

SHA1

099708032d8671e945056b60e03a096de4ab41a9

SHA256

d8ecd4cbd92e805cb866c08abb477e508b619c97a9039f31bc384b540857482a

SHA512

729779359449783c754c4d8e949c133c7491c5881cd8a36c68d952283393e0c0b128486d3d40a1dd381e00ed8cc2fca9bdcedbf5eeb22b9ee45464a1b363e03a

ImpHash

f251951da7a0c1575236301f43162251

PE 分析

基本信息

▼

图标	哈希: 0387a0dc42f63bd3980adf2982924e09 模糊: 6c391a6bbc7da203c8fa21400d6ad5ee dHash: c49af2f29af0cccc
映像基址	`0x00400000`
入口点	`0x00403725`
编译时间	2016-12-22 10:20:51
校验和	0x00000000 (实际: 0x0001d1ca)
操作系统版本	4.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive`
数字签名	No valid SignedData structure was found.
导入	7 库 KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32
导出	0 函数
资源	15 资源
节	5 节

版本信息

▼

Comments	A build of the Launcher for Wondershare Filmora Portable, allowing it to be run from a removable drive.
CompanyName	lrepacks.ru / Skinny
FileDescription	Wondershare Filmora Portable Launcher
FileVersion	2.2.0.0
InternalName	PortableApp Launcher
LegalCopyright	Copyright (C) 2020 Wondershare. All rights reserved.
LegalTrademarks	Wondershare
OriginalFilename	WondershareFilmoraPortable.exe
ProductName	Wondershare Filmora 10
ProductVersion	2.2.0.0
Translation	0x0000 0x04e6

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	26,000 bytes	26,112 bytes	6.47 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`53E51E8AC8F622CA7966E80DA787C089`
`.rdata`	`0x00008000`	4,762 bytes	5,120 bytes	5.10 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`9ACEFD689BB2883995E9BB40E0736709`
`.data`	`0x0000a000`	257,208 bytes	3,584 bytes	4.92 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`64996CFD648F59761004C662596D1069`
`.ndata`	`0x00049000`	270,336 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x0008b000`	57,344 bytes	55,808 bytes	4.97 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`53A9A7E7A00471938435874BDF32E41A`

资源分析

▼

资源总数: 15 (54,595 字节)

资源类型	数量	总大小	百分比
RT_ICON	9	51,880 字节	95%
RT_DIALOG	3	600 字节	1.1%
RT_GROUP_ICON	1	62 字节	0.1%
RT_VERSION	1	1,212 字节	2.2%
RT_MANIFEST	1	841 字节	1.5%

证书链分析

▼

证书 Information

产品	Wondershare Filmora 10
描述	Wondershare Filmora Portable Launcher
文件版本	2.2.0.0
原始名称	WondershareFilmoraPortable.exe
内部名称	PortableApp Launcher
版权	Copyright (C) 2020 Wondershare. All rights reserved.

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	FilmoraPortable.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
扫描器版本	1.0.227.174
数据库版本	2025-10-16 01:00:16 UTC

FilmoraPortable.exe (Wondershare Filmora Portable Launcher) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别