home

wincmp-setup.exe

Compare It!

Igor Green

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Grig Software   (signed by Igor Green)

Product:
Compare It!

Description:
Compare It! Setup

Version:
4.2

MD5:
6d979c94017445de740f4a67b78775e6

SHA-1:
502ab1665f1e9c002a4b66a4d976f8929a10c0ee

SHA-256:
b295909c4a95bf9a698c3b1e9c50551e0cbfd4ba524653d2e2a013e9faa4bca9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:07:20 AM UTC  (today)

File size:
1.8 MB (1,923,176 bytes)

Product version:
4.2

Copyright:
Copyright © 1997-2009 Grig Software.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:
Igor Green

Authority:
The USERTRUST Network

Valid from:
3/2/2009 4:00:00 PM

Valid to:
3/3/2010 3:59:59 PM

Subject:
CN=Igor Green, O=Igor Green, STREET=pr. Nezavisimosti 185-149, L=Minsk, S=BY, PostalCode=220125, C=BY

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00926F17D5DF73E46EEF037B10DBF00C9D

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:D2USQ/E0sCF0MmId773M+Z1K2YzwGbo/f3SazRs5UdC4lpydnoL8YaXaP:D2Vu+5IN3MI0weo/PXif0pydorai

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9938

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file wincmp-setup.exe has been seen being distributed by the following 2 URLs.

http://lb.cdn.m6web.fr/d/c/a/ef0a870d99551d82c66a90bef2e0b186/573d8229/soft/.../compare-it_4-2-2221_fr_10288.exe

http://www.grigsoft.com/wincmp-setup.exe

Scan wincmp-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.