Setup MPX Native Reverb v1 3 13 8007 exe (Lexicon MPX Native Reverb Setup) Lexicon 文件恶意软件分析

Setup MPX Native Reverb v1.3.13.8007.exe (Lexicon MPX Native Reverb Setup) 文件分析

更新于 23 days ago

检查者 Malware Check

Setup MPX Native Reverb v1.3.13.8007.exe

哈希类型	值	操作
MD5	c597ad299efae632eec3fe3f789b2c79
SHA1	51a0432d090cae456dfa17a2dc0f306357421d97
SHA256	49681f49cd018a64c0cd83e5782ffb8b7a53d1b84d70a1142bc04927864c52e8
SHA512	0483b9bb1dd8c0f042eb86cbdc476ec1190fcc42cd44daafc61335a5a48cb7942efea00f4576d3b6aa300c1f2457191fcaf27e9eb9ca8734b486ded0cc5ffc91
ImpHash	efd455830ba918de67076b7c65d86586

哈希类型

值

操作

MD5

c597ad299efae632eec3fe3f789b2c79

SHA1

51a0432d090cae456dfa17a2dc0f306357421d97

SHA256

49681f49cd018a64c0cd83e5782ffb8b7a53d1b84d70a1142bc04927864c52e8

SHA512

0483b9bb1dd8c0f042eb86cbdc476ec1190fcc42cd44daafc61335a5a48cb7942efea00f4576d3b6aa300c1f2457191fcaf27e9eb9ca8734b486ded0cc5ffc91

ImpHash

efd455830ba918de67076b7c65d86586

PE 分析

基本信息

▼

图标	哈希: a0ef7c81eee20e999575764306184ccf 模糊: 8341e53a6f1047f3c936b4d36dc8f542 dHash: 5050d274ccec82ae
映像基址	`0x00400000`
入口点	`0x004acfe0`
编译时间	2025-05-03 14:45:36
校验和	0x00000000 (实际: 0x01dec477)
操作系统版本	6.1
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	5 库 kernel32, comctl32, user32, oleaut32, advapi32
导出	2 函数
资源	31 资源
节	11 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	Lexicon
FileDescription	Lexicon MPX Native Reverb Setup
FileVersion	1.3.13.8007
LegalCopyright	Lexicon
OriginalFileName
ProductName	MPX Native Reverb
ProductVersion	1.3.13.8007
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	698,084 bytes	698,368 bytes	6.39 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B8445BDD9E5484C726072A6120DAC5D3`
`.itext`	`0x000ac000`	6,024 bytes	6,144 bytes	6.25 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`5F4B1E9E79C8B34D6A04F97D624934E2`
`.data`	`0x000ae000`	15,356 bytes	15,360 bytes	4.96 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5C86C8844D87A63141D9256AB8648C6D`
`.bss`	`0x000b2000`	29,348 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000ba000`	4,198 bytes	4,608 bytes	4.82 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CFABBE97F496978BE1D9ED2B0E76508C`
`.didata`	`0x000bc000`	420 bytes	512 bytes	2.76 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`6B25D6A3BA6793DF88CEEC45D9ED59B3`
`.edata`	`0x000bd000`	113 bytes	512 bytes	1.33 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1F044B007F9A7C5E77E0A9392C1C3BCB`
`.tls`	`0x000be000`	24 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000bf000`	93 bytes	512 bytes	1.40 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`48BDF6E6093F9760E6F540D2B96A5683`
`.reloc`	`0x000c0000`	70,408 bytes	70,656 bytes	6.71 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`94B970C14A85684DE6C6A4DFAA0A363B`
`.rsrc`	`0x000d2000`	70,144 bytes	70,144 bytes	3.73 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E495B39E1A8CD8B5F011007F5F894202`

熵分析警报

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 31 (68,381 字节)

资源类型	数量	总大小	百分比
RT_ICON	13	55,173 字节	80.7%
RT_STRING	12	8,692 字节	12.7%
RT_RCDATA	3	956 字节	1.4%
RT_GROUP_ICON	1	188 字节	0.3%
RT_VERSION	1	1,412 字节	2.1%
RT_MANIFEST	1	1,960 字节	2.9%

证书链分析

▼

证书 Information

产品	MPX Native Reverb
描述	Lexicon MPX Native Reverb Setup
文件版本	1.3.13.8007
版权	Lexicon

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Setup MPX Native Reverb v1.3.13.8007.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.231.174
数据库版本	2025-12-18 17:00:35 UTC

Setup MPX Native Reverb v1.3.13.8007.exe (Lexicon MPX Native Reverb Setup) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别