The ShareX 17 0 0 setup exe (ShareX Setup) ShareX Team File Malware Analysis

The ShareX-17.0.0-setup.exe (ShareX Setup) File Analysis

Updated 2 months ago

Checked by Malaware Check

ShareX-17.0.0-setup.exe

Hash Type	Value	Action
MD5	e452108003cf545d94d62f7450c93bdd
SHA1	5d9b3f54c8320b51ed87b97b38e2aac77c12354d
SHA256	8b7ba685e7cb588356611f24fd06c0884678e53b49e6618e5d65412127c96e48
SHA512	d95e1feef9b473c8770240e98c917e85efd3bfa8133be6d9a71675c2aeec38edcb8a7493278f4e9fda4a3233ce1287e59f51f6d7f33b1377d5a644af164a17b6
ImpHash	40ab50289f7ef5fae60801f88d4541fc

Hash Type

Value

Action

MD5

e452108003cf545d94d62f7450c93bdd

SHA1

5d9b3f54c8320b51ed87b97b38e2aac77c12354d

SHA256

8b7ba685e7cb588356611f24fd06c0884678e53b49e6618e5d65412127c96e48

SHA512

d95e1feef9b473c8770240e98c917e85efd3bfa8133be6d9a71675c2aeec38edcb8a7493278f4e9fda4a3233ce1287e59f51f6d7f33b1377d5a644af164a17b6

ImpHash

40ab50289f7ef5fae60801f88d4541fc

PE Analysis

Basic Information

▼

Icon	Hash: a0ef7c81eee20e999575764306184ccf Fuzzy: 8341e53a6f1047f3c936b4d36dc8f542 dHash: 5050d274ccec82ae
Image Base	`0x00400000`
Entry Point	`0x004a83bc`
Compilation Time	2024-07-12 07:26:53
Checksum	0x00000000 (Actual: 0x02b5dc39)
OS Version	6.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries kernel32, comctl32, user32, oleaut32, advapi32
Exports	2 functions
Resources	30 Resources
Sections	11 Sections

Version Information

▼

Comments	This installation was built with Inno Setup.
CompanyName	ShareX Team
FileDescription	ShareX Setup
FileVersion	17.0.0
LegalCopyright	Copyright (c) 2007-2025 ShareX Team
OriginalFileName
ProductName	ShareX
ProductVersion	17.0.0
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	677,516 bytes	677,888 bytes	6.38 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B889D302F6FC48A904DE33D8D947AE80`
`.itext`	`0x000a7000`	7,012 bytes	7,168 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`588DD0A8AB499300D3701CBD11B017D9`
`.data`	`0x000a9000`	14,392 bytes	14,848 bytes	4.96 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5C0C76E77AEF52EBC6702430837CCB6E`
`.bss`	`0x000ad000`	29,272 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000b5000`	4,076 bytes	4,096 bytes	5.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`627340DFF539EF99048969AA4824FB2D`
`.didata`	`0x000b6000`	420 bytes	512 bytes	2.73 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`FD11C1109737963CC6CB7258063ABFD6`
`.edata`	`0x000b7000`	113 bytes	512 bytes	1.31 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7DE8CA0C7A61668A728FD3A88DC0942D`
`.tls`	`0x000b8000`	24 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000b9000`	93 bytes	512 bytes	1.39 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D84006640084DC9F74A07C2FF9C7D656`
`.reloc`	`0x000ba000`	69,544 bytes	69,632 bytes	6.71 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`A85FDA2741BD9417695DAA5FC5A9D7A5`
`.rsrc`	`0x000cb000`	69,632 bytes	69,632 bytes	3.72 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5B4AA0FBC5E7640B03F35AA91244A4C4`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 30 (67,913 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	13	55,173 bytes	81.2%
RT_STRING	11	8,336 bytes	12.3%
RT_RCDATA	3	844 bytes	1.2%
RT_GROUP_ICON	1	188 bytes	0.3%
RT_VERSION	1	1,412 bytes	2.1%
RT_MANIFEST	1	1,960 bytes	2.9%

Certificate Chain Analysis

▼

Certificate Information

Product	ShareX
Description	ShareX Setup
File Version	17.0.0
Copyright	Copyright (c) 2007-2025 ShareX Team

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	ShareX-17.0.0-setup.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.210.174
Database Version	2025-03-16 18:01:11 UTC

The ShareX-17.0.0-setup.exe (ShareX Setup) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification