Gridinsoft Logo
File Icon

The SumatraPDF-3.5.2-64-install.exe (SumatraPDF) File Analysis

Technical Analysis

File Name SumatraPDF-3.5.2-64-install.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.177.174
Database Version 2024-05-27 00:00:27 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
8,246,744
File Size (bytes)
2024-05-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d3269f0f422d36f24e62bd30ae722bfd
SHA1
a700ecab3628239a7c2831b4f74487419d9aa850
SHA256
2be4a27b83830ea07c6671c3557673d509544e5f70fc6b2dc8cc4388b302c1f2
SHA512
2895308c81f2152a6c2f3a64eb2580ef49175a35ec9a492392f813004bd2205d4f98b33f2b2b0caf31325ce682fbbabb970be0188d3b1c304abbf68b9cd1be31
ImpHash
1b413546914b96c61de41615bad3a1c0

PE Analysis

Basic Information

Icon
Hash: e1ad7ef80a02b2db41667c9dc01738ca
Fuzzy: 31aa66190d87a4033e593a30507edc5c
dHash: 0080f0a4b698a400
Image Base 0x140000000
Entry Point 0x1400eb990
Compilation Time 2023-10-25 08:17:48
Checksum 0x007e3627 (Actual: 0x007e3627)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\Users\kjk\src\sumatrapdf\out\rel64\SumatraPDF-dll.pdb
Digital Signature OK
Imports 10 libraries
COMCTL32, KERNEL32, USER32, GDI32, WINSPOOL, COMDLG32, ADVAPI32, SHELL32, ole32, OLEAUT32
Exports 0 functions
Resources 46 Resources
Sections 7 Sections

Version Information

FileDescription SumatraPDF
FileVersion 3.5.2
LegalCopyright Copyright 2006-2022 all authors (GPLv3)
ProductName SumatraPDF
ProductVersion 3.5.2
CompanyName Krzysztof Kowalczyk
Translation 0x0409 0x04e4

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,192,654 bytes 1,192,960 bytes 6.52 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C77160DF4C857D066CA4F9C9A745DC24
.rdata 0x00125000 230,342 bytes 230,400 bytes 5.58 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D457810F2A8866B73D71E58E234C63C2
.data 0x0015e000 71,176 bytes 32,768 bytes 3.72 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 2AB881C8FF84FFA70AE52FDEE801A4C5
.pdata 0x00170000 40,368 bytes 40,448 bytes 6.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D2300A674E7A365ED094414504CE4DF0
_RDATA 0x0017a000 348 bytes 512 bytes 3.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1A1328B14653F642D992CDA94F6BFA83
.rsrc 0x0017b000 6,719,072 bytes 6,719,488 bytes 7.95 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 68BA6C1521BA70C51B57F08D36B9EBCE
.reloc 0x007e4000 9,224 bytes 9,728 bytes 5.36 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 578070004B9E9ED87A7E9CCD1B32221B
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 46 (6,716,553 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 1 308 bytes
0%
RT_BITMAP 1 808 bytes
0%
RT_ICON 26 355,589 bytes
5.3%
RT_DIALOG 9 4,126 bytes
0.1%
RT_RCDATA 2 6,353,091 bytes
94.6%
RT_GROUP_CURSOR 1 20 bytes
0%
RT_GROUP_ICON 4 388 bytes
0%
RT_VERSION 1 620 bytes
0%
RT_MANIFEST 1 1,603 bytes
0%

Certificate Chain Analysis

Certificate Information
Product SumatraPDF
Description SumatraPDF
File Version 3.5.2
Signing Date 08:18 AM 10/25/2023 (647 days ago)
Verification Status Signed
Signers Krzysztof Kowalczyk; Sectigo RSA Code Signing CA; USERTrust RSA Certification Authority; Sectigo (AAA)
Counter Signers Sectigo RSA Time Stamping Signer #4; Sectigo RSA Time Stamping CA; USERTrust RSA Certification Authority; Sectigo (AAA)
Copyright Copyright 2006-2022 all authors (GPLv3)
Certificate Chain Summary
Krzysztof Kowalczyk #1 Primary
Validity Period: 2021-05-24 00:00:00 → 2024-08-23 23:59:59
Signature Algorithm: sha256RSA
Serial Number: C8 A7 9A CF A2 0C A4 15 09 24 5C 1F 7F 64 FF C4
USERTrust RSA Certification Authority #2 Chain
Validity Period: 2019-03-12 00:00:00 → 2028-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 39 72 44 3A F9 22 B7 51 D7 D3 6C 10 DD 31 35 95
Sectigo RSA Code Signing CA #3 Chain
Validity Period: 2018-11-02 00:00:00 → 2030-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 1D A2 48 30 6F 9B 26 18 D0 82 E0 96 7D 33 D3 6A
Sectigo RSA Time Stamping CA #4 Chain
Validity Period: 2019-05-02 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 30 0F 6F AC DD 66 98 74 7C A9 46 36 A7 78 2D B9
Sectigo RSA Time Stamping Signer #4 #5 Chain
Validity Period: 2023-05-03 00:00:00 → 2034-08-02 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 39 4C 25 E1 7C A0 6D 27 A8 65 E2 3B D9 1D 22 D4

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware