virustotal warning for wimlib-imagex.exe

Comments, questions, bug reports, etc.
Post Reply
Computerdoktor
Posts: 2
Joined: Tue Mar 08, 2022 2:25 pm

virustotal warning for wimlib-imagex.exe

Post by Computerdoktor »

Hi,
on virustotal, one vendor (Gridinsoft) flags wimlib-imagex.exe wimlib-1.13.5-windows-x86_64-bin.zip as malicious:
Ransom.Win64.STOP.dg!se20444
https://www.virustotal.com/gui/file/fc1 ... 75c673bb74
Do you have a SHA256 file integrity hash or a gpg signature for the zip file?
synchronicity
Site Admin
Posts: 472
Joined: Sun Aug 02, 2015 10:31 pm

Re: virustotal warning for wimlib-imagex.exe

Post by synchronicity »

I don't see any issue; all release files match the ones I originally uploaded. For the 1.13.5 release the SHA-256 checksums are:
32fcc9e9b144b7cb1db4c86e104ca78283cdc225e13fe82b273660586aefe323 wimlib-1.13.5.tar.gz
59d0c960e14af4ad18da47aace9802f0eee3b11f647422165ef0b72e12cc529c wimlib-1.13.5-windows-i686-bin.zip
84d671a7e8abbc428b1b29502c8cd1bff91439c4445fa2131f48c6402dcc6fed wimlib-1.13.5-windows-x86_64-bin.zip
Also, if you append ".sig" to the file download URL you get my GPG signature. This works for wimlib v1.13.2 and later (since that's when I started signing the release files). E.g. https://wimlib.net/downloads/wimlib-1.1 ... in.zip.sig

You can get my GPG public key from here: https://git.kernel.org/pub/scm/docs/ker ... B0447C.asc
Computerdoktor
Posts: 2
Joined: Tue Mar 08, 2022 2:25 pm

Re: virustotal warning for wimlib-imagex.exe

Post by Computerdoktor »

Tx. I was just a little bit worried by the warning. Now I trust you.
Post Reply