Gridinsoft Logo
File Icon

The WinMD5.exe (WinMD5Free) File Analysis

Updated 4 months ago
Checked by Malaware Check
WinMD5.exe

Technical Analysis

File Name WinMD5.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.206.174
Database Version 2025-01-29 20:00:38 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
591,872
File Size (bytes)
2025-01-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
944a1e869969dd8a4b64ca5e6ebc209a
SHA1
433e2fad7e6183ae38aba4468288c56db86ce073
SHA256
47701cf4e874a74d27ebad6fd8f68e1c24d5bac14d59573e4f16dec8935d7445
SHA512
9203c3dd26e5f4a57942da914fd749dbe8068885a014b48fcf894eaa32f03c81ab1b73b776e9a4380b272ea26598c8327ca2e574ae78ac5cd526027843720416
ImpHash
1c3d3eee069cca49acb364718e988a52

PE Analysis

Basic Information

▼
Icon
Hash: 86659109fb32deb4291e21ec8287c176
Fuzzy: 89316f6a2a2a0781a62ad709aad4ebeb
dHash: 38f0c4c0e4e4e664
Image Base 0x00400000
Entry Point 0x00466768
Compilation Time 2007-04-29 10:12:00
Checksum 0x00000000 (Actual: 0x000977f1)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 10 libraries
oleaut32, advapi32, user32, kernel32, gdi32, version, ole32, comctl32, shell32, comdlg32
Exports 0 functions
Resources 49 Resources
Sections 9 Sections

Version Information

▼
CompanyName www.winmd5.com
FileDescription WinMD5Free
FileVersion 1.0.1.0
InternalName WinMD5Free
LegalCopyright Liang Ren
LegalTrademarks
OriginalFilename winmd5free.exe
ProductName WinMD5Free
ProductVersion 1.0.1.0
Comments www.winmd5.com
Translation 0x0804 0x03a8

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 413,068 bytes 413,184 bytes 6.54 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 206EFCB61CF40991391160B93030B0A3
.itext 0x00066000 2,004 bytes 2,048 bytes 6.12 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C6EBEC2BF7D0A808CC128E4D9611441E
.data 0x00067000 7,588 bytes 7,680 bytes 3.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5DD434E5E96A0DB1F1DF76BB3D1B18AB
.bss 0x00069000 19,844 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x0006e000 10,638 bytes 10,752 bytes 5.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 8865AB40653F1CD9A090E49B1780DAA0
.tls 0x00071000 52 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x00072000 24 bytes 512 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 849EF860C7FFEC26D53E2917F1E6374D
.reloc 0x00073000 29,084 bytes 29,184 bytes 6.67 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E50395764F7D0EA9105B3131342447D3
.rsrc 0x0007b000 127,488 bytes 127,488 bytes 5.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C7B7D95A3744020AA9839AC5532C17FC
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 49 (124,481 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 7 2,156 bytes
1.7%
RT_BITMAP 11 4,892 bytes
3.9%
RT_ICON 2 4,112 bytes
3.3%
RT_DIALOG 2 164 bytes
0.1%
RT_STRING 14 8,876 bytes
7.1%
RT_RCDATA 3 102,567 bytes
82.4%
RT_GROUP_CURSOR 7 140 bytes
0.1%
RT_GROUP_ICON 1 34 bytes
0%
RT_VERSION 1 788 bytes
0.6%
RT_MANIFEST 1 752 bytes
0.6%

Certificate Chain Analysis

▼
Certificate Information
Product WinMD5Free
Description WinMD5Free
File Version 1.0.1.0
Original Name winmd5free.exe
Internal Name WinMD5Free
Copyright Liang Ren

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware